- All Exams Instant Download
How is the congestion alleviated? so that legitimate business traffic reaches the destination?
An organization has seen a lot of traffic congestion on their links going out to the interanet. There is a Cisco Firepower device that processes all of the traffic going to the internet prior to leaving the enterprise. How is the congestion alleviated? so that legitimate business traffic reaches the...
What configuration change must be made to alleviate this issue?
An engineer configures a network discovery policy on Cisco FMC. Upon configuration, it is noticed that excessive and misleading events are filing the database and overloading the Cisco FMC. A monitored NAT device is executing multiple updates of ts operating system in a short period of time. What configuration change...
Which two widgets must be configured to provide this information?
An engineer is attempting to create a new dashboard within the Cisco FMC to have a single view with widgets from many of the other dashboards. The goal is to have a mixture of threat and security related widgets along with Cisco Firepower device health information. Which two widgets must...
What is the benefit of selecting the trace option for packet capture?
What is the benefit of selecting the trace option for packet capture?A . The option indicates whether the destination host responds through a different pathB . The option limits the number of packets that are capturedC . The option captures details of each packetD . The option indicates whether the...
Which access control policy configuration option should be used if the deployment engineer is not permitted to create a rule to allow all traffic?
Network traffic coming from an organization's CEO must never be denied Which access control policy configuration option should be used if the deployment engineer is not permitted to create a rule to allow all traffic?A . Configure a trust policy for the CEOB . Create a NAT Policy just for...
Which default policy should be used?
An engineer is setting up a new Firepower deployment and is looking at the default FMC policies to start the implementation. During the initial trial phase, the organization wants to test some common Snort rules while still allowing the majority of network traffic to pass. Which default policy should be...
How will this issue be addressed globally in the quickest way possible and with the least amount of impact?
An organization has noticed that malware was downloaded from a website that does not currently have a known bad reputation. How will this issue be addressed globally in the quickest way possible and with the least amount of impact?A . by denying outbound web accessB . by creating a URL...
Which interface mode should be used to meet these requirements?
An engineer is configuring a Cisco FTD appliance in IPS-only mode and needs to utilize fail-to-wire interfaces. Which interface mode should be used to meet these requirements?A . inline setB . passiveC . routedD . transparentView AnswerAnswer: A
Which malware policy configuration option must be selected in order to further analyze the file in the Talos cloud?
A network administrator is seeing an unknown verdict for a file detected by Cisco FTD. Which malware policy configuration option must be selected in order to further analyze the file in the Talos cloud?A . Spero analysisB . sandbox analysisC . dynamic analysisD . malware analysisView AnswerAnswer: C
What must be done to address this issue?
Refer to the exhibit. An organization has an access control rule with the intention of sending all social media traffic for inspection. After using the rule for some time, the administrator notices that the traffic is not being inspected, but is being automatically allowed. What must be done to address...
