Which interface type allows packets to be dropped?

Which interface type allows packets to be dropped?A . passiveB . inlineC . ERSPAND . TAPView AnswerAnswer: B Explanation: Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200908-configuring-firepower-threat-defense-int.html

May 3, 2022 No Comments READ MORE +

After deploying a network-monitoring tool to manage and monitor networking devices in your organization, you realize that you need to manually upload an MIB for the Cisco FMC. In which folder should you upload the MIB file?

After deploying a network-monitoring tool to manage and monitor networking devices in your organization, you realize that you need to manually upload an MIB for the Cisco FMC. In which folder should you upload the MIB file?A . /etc/sf/DCMIB . ALERTC . /sf/etc/DCEALERD . MIBE . /etc/sf/DCEALERF . MIBG ....

May 3, 2022 No Comments READ MORE +

What is the difference between inline and inline tap on Cisco Firepower?

What is the difference between inline and inline tap on Cisco Firepower?A . Inline tap mode can send a copy of the traffic to another device.B . Inline tap mode does full packet capture.C . Inline mode cannot do SSL decryption.D . Inline mode can drop malicious traffic.View AnswerAnswer: A

May 3, 2022 No Comments READ MORE +

What are two application layer preprocessors? (Choose two.)

What are two application layer preprocessors? (Choose two.)A . CIFSB . IMAPC . SSLD . DNP3E . ICMPView AnswerAnswer: B,C Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Application_Layer_Preprocessors.html

May 2, 2022 No Comments READ MORE +

Which Cisco Advanced Malware Protection for Endpoints policy is used only for monitoring endpoint actively?

Which Cisco Advanced Malware Protection for Endpoints policy is used only for monitoring endpoint actively?A . Windows domain controllerB . auditC . triageD . protectionView AnswerAnswer: B Explanation: Reference: https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/214933-amp-for-endpoints-deployment-methodology.html

May 2, 2022 No Comments READ MORE +

Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD? (Choose two.)

Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD? (Choose two.)A . OSPFv2 with IPv6 capabilitiesB . virtual linksC . SHA authentication to OSPF packetsD . area boundary router type 1 LSA filteringE . MD5 authentication to OSPF packetsView AnswerAnswer: B,E Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/ospf_for_firepower_threat_defense.html

May 2, 2022 No Comments READ MORE +

Which command is typed at the CLI on the primary Cisco FTD unit to temporarily stop running high-availability?

Which command is typed at the CLI on the primary Cisco FTD unit to temporarily stop running high-availability?A . configure high-availability resumeB . configure high-availability disableC . system support network-optionsD . configure high-availability suspendView AnswerAnswer: B Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/firepower_threat_defense_high_availability.html

May 2, 2022 No Comments READ MORE +

Which connector is used to integrate Cisco ISE with Cisco FMC for Rapid Threat Containment?

Which connector is used to integrate Cisco ISE with Cisco FMC for Rapid Threat Containment?A . pxGridB . FTD RTCC . FMC RTCD . ISEGridView AnswerAnswer: A

May 2, 2022 No Comments READ MORE +

Why Is this occurring?

An engineer is using the configure manager add <FMC IP> Cisc402098527 command to add a new Cisco FTD device to the Cisco FMC; however, the device is not being added . Why Is this occurring?A . The NAT ID is required since the Cisco FMC is behind a NAT device.B...

May 1, 2022 No Comments READ MORE +

How is this requirement satisfied?

An engineer is tasked with deploying an internal perimeter firewall that will support multiple DMZs Each DMZ has a unique private IP subnet range . How is this requirement satisfied?A . Deploy the firewall in transparent mode with access control policies.B . Deploy the firewall in routed mode with access...

May 1, 2022 No Comments READ MORE +