When TCP Intercept is enabled in its default mode, how does it react to a SYN request?
A. It monitors the sequence of SYN, SYN-ACK, and ACK messages until the connection is fully established.
B. It drops the connection.
C. It monitors the attempted connection and drops it if it fails to establish within 30 seconds
D. It allows the connection without inspection
E. It intercepts the SYN before it reaches the server and responds with a SYN-ACK
https://www.cisco.com/c/en/us/td/docs/ios/12_2/security/configuration/guide/fsecur_c/scfdenl.html
you can see there:
The TCP intercept can operate in either active intercept mode or passive watch mode. The default is intercept mode.