Exam 300-415 topic 1 question 262 discussion

That "existing data-policy configuration" is incomplete and/or misleading. The one who formulated those ENSDWI questions should be fired.

C is the right answer according to me.

B and D are wrong because they say color instead of NAT. A is wrong because of the sequence number. We need the DIA sequence to occur after excluding the local traffic. C gets those things right, and must be the answer. But... shouldn't the sequence 10 code end with "action accept"?

Answer is [C] The exhibit already shows the data-policy defined with a sequence number of 10 data-policy DIA VPN-list VPN-67 sequence 10 match destination-data-prefix-list INTERNAL-NETWORKS default-action drop The requirement is to have DIA for http, https traffic and to not specify (discriminate) against which transport to use. The next ordered sequence from the existing configuration would be 20 (10 being the previous) matching destinations ports 80, 443 from all internal networks with a default route (any/any) Nat use-vpn 0 Action is accepted with matching traffic sent to the transport VPN 0 DIA Option [C] fulfils the request.

I would say C fist sequence 10 to match internal networks then higher sequence so 20 to match destination port 80 and 443 and destination ip any finally action accept and use nat and vpn0 as exit to DIA

A is the correct answer

B is the correct answer

Shouldn't this be A? It wouldn't hit sequence 20 unless I'm missing something