When a security policy is deleted, which statement is correct about the default behavior of active sessions allowed by that policy?

When a security policy is deleted, which statement is correct about the default behavior of active sessions allowed by that policy?
A . The active sessions allowed by the policy will be dropped.
B . The active sessions allowed by the policy will be marked as a legacy flow and will continue to be forwarded.
C . The active sessions allowed by the policy will be reevaluated by the cached
D . The active sessions allowed by the policy will continue

View Answer

Answer: B

Explanation:

When a security policy is deleted, the existing sessions that were previously allowed by that policy are not immediately dropped; instead, they are typically treated as legacy flows. This means they are allowed to continue until they naturally end or until the session timeout is reached. This behavior ensures that deleting a policy does not abruptly disrupt ongoing traffic flows that were previously authorized by that policy. This approach helps in avoiding unintended service disruptions, especially in production environments where active connections may be critical to operations.