Which option is NOT listed as an option when using Classic policies?

• A. DNS
• B. IP
• C. HTTP
• D. TCP

Answer: (A)

Classic policies are designed to match traffic using a small set of straightforward protocol categories. You can pick categories that represent generic IP traffic, TCP-based traffic, or HTTP traffic, which are common and directly recognizable by the policy engine. DNS, on the other hand, isn’t offered as its own built-in category in Classic policies. DNS traffic is carried over UDP or TCP on port 53, so it’s typically handled by matching on the transport and port (or by applying a DNS-specific policy if available), rather than selecting DNS as a separate policy category. That’s why DNS isn’t listed as an option in Classic policies, making it the one that isn’t listed. The other options—IP, TCP, and HTTP—are the standard categories you would see.