A security engineer is configuring an Access Control Policy for multiple branch locations. These locations share a common rule set and utilize a network object called INSIDE_NET which contains the locally significant internal network subnets at each location. What technique will retain the policy consistency at each location but allow only the locally significant network subnet within the application rules?
A) utilizing a dynamic ACP that updates from Cisco Talos
B) creating a unique ACP per device
C) utilizing policy inheritance
D) creating an ACP with an INSIDE_NET network object and object overrides

Question

Quizplus · Accepted Answer

Using an INSIDE_NET network object with object overrides allows each location to maintain a consistent policy while specifying locally significant subnets.

A Security Engineer Is Configuring an Access Control Policy for Multiple