What is the maximum bit size that Cisco FMC supports for HTTPS certificates?

What is the maximum bit size that Cisco FMC supports for HTTPS certificates?A . 1024B . 8192C . 4096D . 2048View AnswerAnswer: D Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/system_configuration.html

February 5, 2021 No Comments READ MORE +

What is the result of specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?

What is the result of specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?A . The rate-limiting rule is disabled.B . Matching traffic is not rate limited.C . The system rate-limits all traffic.D . The system repeatedly generates warnings.View AnswerAnswer:...

February 5, 2021 No Comments READ MORE +

What are the minimum requirements to deploy a managed device inline?

What are the minimum requirements to deploy a managed device inline?A . inline interfaces, security zones, MTU, and modeB . passive interface, MTU, and modeC . inline interfaces, MTU, and modeD . passive interface, security zone, MTU, and modeView AnswerAnswer: C Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/ips_device_deployments_and_configuration.html

February 4, 2021 No Comments READ MORE +

Which two routing options are valid with Cisco Firepower Threat Defense? (Choose two.)

Which two routing options are valid with Cisco Firepower Threat Defense? (Choose two.)A . BGPv6B . ECMP with up to three equal cost paths across multiple interfacesC . ECMP with up to three equal cost paths across a single interfaceD . BGPv4 in transparent firewall modeE . BGPv4 with nonstop...

February 3, 2021 No Comments READ MORE +

Which policy rule is included in the deployment of a local DMZ during the initial deployment of a Cisco NGFW through the Cisco FMC GUI?

Which policy rule is included in the deployment of a local DMZ during the initial deployment of a Cisco NGFW through the Cisco FMC GUI?A . a default DMZ policy for which only a user can change the IP addresses.B . deny ip anyC . no policy rule is includedD...

February 3, 2021 No Comments READ MORE +

Which Cisco Firepower feature is used to reduce the number of events received in a period of time?

Which Cisco Firepower feature is used to reduce the number of events received in a period of time?A . rate-limitingB . suspendingC . correlationD . thresholdingView AnswerAnswer: D Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa-firepower-module-user-guide-v541/Intrusion-Global-Threshold.html

February 3, 2021 No Comments READ MORE +

Which protocol establishes network redundancy in a switched Firepower device deployment?

Which protocol establishes network redundancy in a switched Firepower device deployment?A . STPB . HSRPC . GLBPD . VRRPView AnswerAnswer: A Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/firepower_threat_defense_high_availability.html

February 3, 2021 No Comments READ MORE +

Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)

Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)A . The units must be the same versionB . Both devices can be part of a different group that must be in the same domain when configured within the FMD . The units...

February 3, 2021 No Comments READ MORE +

Which Firepower feature allows users to configure bridges in routed mode and enables devices to perform Layer 2 switching between interfaces?

Which Firepower feature allows users to configure bridges in routed mode and enables devices to perform Layer 2 switching between interfaces?A . FlexConfigB . BDIC . SGTD . IRBView AnswerAnswer: D Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/relnotes/Firepower_System_Release_Notes_Version_620/new_features_and_functionality.html

February 2, 2021 No Comments READ MORE +

What is the difference between inline and inline tap on Cisco Firepower?

What is the difference between inline and inline tap on Cisco Firepower?A . Inline tap mode can send a copy of the traffic to another device.B . Inline tap mode does full packet capture.C . Inline mode cannot do SSL decryption.D . Inline mode can drop malicious traffic.View AnswerAnswer: D

February 2, 2021 No Comments READ MORE +