In the default global policy, which traffic is matched for inspections by default?
A.
match any
B.
match default-inspection-traffic
C.
match access-list
D.
match port
E.
match class-default
Explanation:
http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/inspect.html#wp1383691
Default Inspection Policy
By default, the configuration includes a policy that matches all default application inspection traffic
and applies inspection to the traffic on all interfaces (a global policy). Default application inspection
traffic includes traffic to the default ports for each protocol. You can only apply one global policy,
so if you want to alter the global policy, for example, to apply inspection to non-standard ports, or
to add inspections that are not enabled by default, you need to either edit the default policy or
disable it and apply a new one.