What is a result of enabling Cisco FTD clustering?

What is a result of enabling Cisco FTD clustering?A . For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections. B. Integrated Routing and Bridging is supported on the master unit. C. Site-to-site VPN functionality is limited to the master unit,...

February 23, 2023 No Comments READ MORE +

Which action must be taken while replacing the faulty unit?

A network security engineer must replace a faulty Cisco FTD device in a high availability pair. Which action must be taken while replacing the faulty unit?A . Shut down the Cisco FMC before powering up the replacement unit. B. Ensure that the faulty Cisco FTD device remains registered to the...

February 23, 2023 No Comments READ MORE +

Which deployment mode meets the needs of the organization?

When deploying a Cisco ASA Firepower module, an organization wants to evaluate the contents of the traffic without affecting the network. It is currently configured to have more than one instance of the same device on the physical appliance. Which deployment mode meets the needs of the organization? A. inline...

February 23, 2023 No Comments READ MORE +

In which two places can thresholding settings be configured? (Choose two.)

In which two places can thresholding settings be configured? (Choose two.)A . on each IPS rule B. globally, within the network analysis policy C. globally, per intrusion policy D. on each access control rule E. per preprocessor, within the network analysis policyView AnswerAnswer: A,C Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa-firepower-module-user-guide-v541/Intrusion-Global-Threshold.pdf

February 22, 2023 No Comments READ MORE +

Which Firepower feature allows users to configure bridges in routed mode and enables devices to perform Layer 2 switching between interfaces?

Which Firepower feature allows users to configure bridges in routed mode and enables devices to perform Layer 2 switching between interfaces?A . FlexConfig B. BDI C. SGT D. IRBView AnswerAnswer: D Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/relnotes/Firepower_System_Release_Notes_Version_620/new_features_and_functionality.html

February 22, 2023 No Comments READ MORE +

Which policy must be configured to accomplish this goal?

An administrator is optimizing the Cisco FTD rules to improve network performance, and wants to bypass inspection for certain traffic types to reduce the load on the Cisco FTD. Which policy must be configured to accomplish this goal?A . prefilter B. intrusion C. identity D. URL filteringView AnswerAnswer: A

February 21, 2023 No Comments READ MORE +

Which report template field format is available in Cisco FMC?

Which report template field format is available in Cisco FMC?A . box lever chart B. arrow chart C. bar chart D. benchmark chartView AnswerAnswer: C Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Working_with_Reports.html

February 21, 2023 No Comments READ MORE +

How many report templates does the Cisco Firepower Management Center support?

How many report templates does the Cisco Firepower Management Center support?A . 20 B. 10 C. 5 D. unlimitedView AnswerAnswer: D Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Working_with_Reports.html

February 21, 2023 No Comments READ MORE +

Which action should you take when Cisco Threat Response notifies you that AMP has identified a file as malware?

Which action should you take when Cisco Threat Response notifies you that AMP has identified a file as malware?A . Add the malicious file to the block list. B. Send a snapshot to Cisco for technical support. C. Forward the result of the investigation to an external threat-analysis engine. D....

February 21, 2023 No Comments READ MORE +

Which command is entered in the Cisco FMC CLI to generate a troubleshooting file?

Which command is entered in the Cisco FMC CLI to generate a troubleshooting file?A . show running-config B. show tech-support chassis C. system support diagnostic-cli D. sudo sf_troubleshoot.plView AnswerAnswer: D Explanation: Reference: https://www.cisco.com/c/en/us/support/docs/security/sourcefire-defense-center/117663-technote-SourceFire-00.html

February 21, 2023 No Comments READ MORE +