Question 1

Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)

Accepted Answer

A)  The units must be the same version 
B)  Both devices can be part of a different group that must be in the same domain when configured within the FMC. 
C)  The units must be different models if they are part of the same series. 
D)  The units must be configured only for firewall routed mode. 
E)  The units must be the same model. 
A)  The units must be the same version 
B)  Both devices can be part of a different group that must be in the same domain when configured within the FMC. 
C)  The units must be different models if they are part of the same series. 
D)  The units must be configured only for firewall routed mode. 
E)  The units must be the same model. A,E

Question 2

A network engineer is extending a user segment through an FTD device for traffic inspection without creating another IP subnet. How is this accomplished on an FTD device in routed mode?

Accepted Answer

A)  by assigning an inline set interface 
B)  by using a BVI and creating a BVI IP address in the same subnet as the user segment 
C)  by leveraging the ARP to direct traffic through the firewall 
D)  by bypassing protocol inspection by leveraging pre-filter rules 
A)  by assigning an inline set interface 
B)  by using a BVI and creating a BVI IP address in the same subnet as the user segment 
C)  by leveraging the ARP to direct traffic through the firewall 
D)  by bypassing protocol inspection by leveraging pre-filter rules A

Question 3

Which group within Cisco does the Threat Response team use for threat analysis and research?

Accepted Answer

A)  Cisco Deep Analytics 
B)  OpenDNS Group 
C)  Cisco Network Response 
D)  Cisco Talos 
A)  Cisco Deep Analytics 
B)  OpenDNS Group 
C)  Cisco Network Response 
D)  Cisco Talos D

Question 4

What are two application layer preprocessors? (Choose two.)

Accepted Answer

A)  CIFS 
B)  IMAP 
C)  SSL 
D)  DNP3 
E)  ICMP 
A)  CIFS 
B)  IMAP 
C)  SSL 
D)  DNP3 
E)  ICMP

Question 5

What is a behavior of a Cisco FMC database purge?

Accepted Answer

A)  User login and history data are removed from the database if the User Activity check box is selected. 
B)  Data is recovered from the device. 
C)  The appropriate process is restarted. 
D)  The specified data is removed from Cisco FMC and kept for two weeks. 
A)  User login and history data are removed from the database if the User Activity check box is selected. 
B)  Data is recovered from the device. 
C)  The appropriate process is restarted. 
D)  The specified data is removed from Cisco FMC and kept for two weeks.

Question 6

With a recent summer time change, system logs are showing activity that occurred to be an hour behind real time. Which action should be taken to resolve this issue?

Accepted Answer

A)  Manually adjust the time to the correct hour on all managed devices. 
B)  Configure the system clock settings to use NTP with Daylight Savings checked. 
C)  Configure the system clock settings to use NTP. 
D)  Manually adjust the time to the correct hour on the Cisco FMC. 
A)  Manually adjust the time to the correct hour on all managed devices. 
B)  Configure the system clock settings to use NTP with Daylight Savings checked. 
C)  Configure the system clock settings to use NTP. 
D)  Manually adjust the time to the correct hour on the Cisco FMC.

Question 7

What is the difference between inline and inline tap on Cisco Firepower?

Accepted Answer

A)  Inline tap mode can send a copy of the traffic to another device. 
B)  Inline tap mode does full packet capture. 
C)  Inline mode cannot do SSL decryption. 
D)  Inline mode can drop malicious traffic. 
A)  Inline tap mode can send a copy of the traffic to another device. 
B)  Inline tap mode does full packet capture. 
C)  Inline mode cannot do SSL decryption. 
D)  Inline mode can drop malicious traffic.

Question 8

Which feature within the Cisco FMC web interface allows for detecting, analyzing, and blocking malware in network traffic?

Accepted Answer

A)  intrusion and file events 
B)  Cisco AMP for Networks 
C)  file policies 
D)  Cisco AMP for Endpoints 
A)  intrusion and file events 
B)  Cisco AMP for Networks 
C)  file policies 
D)  Cisco AMP for Endpoints

Question 9

Which Cisco Firepower Threat Defense, which two interface settings are required when configuring a routed interface? (Choose two.)

Accepted Answer

A)  Redundant Interface 
B)  EtherChannel 
C)  Speed 
D)  Media Type 
E)  Duplex 
A)  Redundant Interface 
B)  EtherChannel 
C)  Speed 
D)  Media Type 
E)  Duplex

Question 10

An engineer is tasked with deploying an internal perimeter firewall that will support multiple DMZs. Each DMZ has a unique private IP subnet range. How is this requirement satisfied?

Accepted Answer

A)  Deploy the firewall in transparent mode with access control policies 
B)  Deploy the firewall in routed mode with access control policies 
C)  Deploy the firewall in routed mode with NAT configured 
D)  Deploy the firewall in transparent mode with NAT configured 
A)  Deploy the firewall in transparent mode with access control policies 
B)  Deploy the firewall in routed mode with access control policies 
C)  Deploy the firewall in routed mode with NAT configured 
D)  Deploy the firewall in transparent mode with NAT configured

Question 11

What are the minimum requirements to deploy a managed device inline?

Accepted Answer

A)  inline interfaces, security zones, MTU, and mode 
B)  passive interface, MTU, and mode 
C)  inline interfaces, MTU, and mode 
D)  passive interface, security zone, MTU, and mode 
A)  inline interfaces, security zones, MTU, and mode 
B)  passive interface, MTU, and mode 
C)  inline interfaces, MTU, and mode 
D)  passive interface, security zone, MTU, and mode

Question 12

Which limitation applies to Cisco Firepower Management Center dashboards in a multidomain environment?

Accepted Answer

A)  Child domains can view but not edit dashboards that originate from an ancestor domain. 
B)  Child domains have access to only a limited set of widgets from ancestor domains. 
C)  Only the administrator of the top ancestor domain can view dashboards. 
D)  Child domains cannot view dashboards that originate from an ancestor domain. 
A)  Child domains can view but not edit dashboards that originate from an ancestor domain. 
B)  Child domains have access to only a limited set of widgets from ancestor domains. 
C)  Only the administrator of the top ancestor domain can view dashboards. 
D)  Child domains cannot view dashboards that originate from an ancestor domain.

Question 13

Which two actions can be used in an access control policy rule? (Choose two.)

Accepted Answer

A)  Block with Reset 
B)  Monitor 
C)  Analyze 
D)  Discover 
E)  Block ALL 
A)  Block with Reset 
B)  Monitor 
C)  Analyze 
D)  Discover 
E)  Block ALL

Question 14

A network administrator is concerned about the high number of malware files affecting users' machines. What must be done within the access control policy in Cisco FMC to address this concern?

Accepted Answer

A)  Create an intrusion policy and set the access control policy to block 
B)  Create an intrusion policy and set the access control policy to allow 
C)  Create a file policy and set the access control policy to allow 
D)  Create a file policy and set the access control policy to block 
A)  Create an intrusion policy and set the access control policy to block 
B)  Create an intrusion policy and set the access control policy to allow 
C)  Create a file policy and set the access control policy to allow 
D)  Create a file policy and set the access control policy to block

Question 15

A hospital network needs to upgrade their Cisco FMC managed devices and needs to ensure that a disaster recovery process is in place. What must be done in order to minimize downtime on the network?

Accepted Answer

A)  Configure a second circuit to an ISP for added redundancy. 
B)  Keep a copy of the current configuration to use as backup. 
C)  Configure the Cisco FMCs for failover. 
D)  Configure the Cisco FMC managed devices for clustering. 
A)  Configure a second circuit to an ISP for added redundancy. 
B)  Keep a copy of the current configuration to use as backup. 
C)  Configure the Cisco FMCs for failover. 
D)  Configure the Cisco FMC managed devices for clustering.

Question 16

Which report template field format is available in Cisco FMC?

Accepted Answer

A)  box lever chart 
B)  arrow chart 
C)  bar chart 
D)  benchmark chart 
A)  box lever chart 
B)  arrow chart 
C)  bar chart 
D)  benchmark chart

Question 17

With Cisco Firepower Threat Defense software, which interface mode must be configured to passively receive traffic that passes through the appliance?

Accepted Answer

A)  inline set 
B)  passive 
C)  routed 
D)  inline tap 
A)  inline set 
B)  passive 
C)  routed 
D)  inline tap

Question 18

Which Cisco AMP for Endpoints policy is used only for monitoring endpoint activity?

Accepted Answer

A)  Windows domain controller 
B)  audit 
C)  triage 
D)  protection 
A)  Windows domain controller 
B)  audit 
C)  triage 
D)  protection

Question 19

An engineer is restoring a Cisco FTD configuration from a remote backup using the command restore remote-manager-backup location 1.1.1.1 admin /Volume/home/admin BACKUP_Cisc394602314.zip on a Cisco FMC. After connecting to the repository, an error occurred that prevents the FTD device from accepting the backup file. What is the problem?

Accepted Answer

A)  The backup file is not in .cfg format 
B)  The backup file is too large for the Cisco FTD device 
C)  The backup file extension was changed from .tar to .zip 
D)  The backup file was not enabled prior to being applied 
A)  The backup file is not in .cfg format 
B)  The backup file is too large for the Cisco FTD device 
C)  The backup file extension was changed from .tar to .zip 
D)  The backup file was not enabled prior to being applied

Question 20

After using Firepower for some time and learning about how it interacts with the network, an administrator is trying to correlate malicious activity with a user. Which widget should be configured to provide this visibility on the Cisco Firepower dashboards?

Accepted Answer

A)  Current Sessions 
B)  Correlation Events 
C)  Current Status 
D)  Custom Analysis 
A)  Current Sessions 
B)  Correlation Events 
C)  Current Status 
D)  Custom Analysis

Exam 23: Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)

A network engineer is extending a user segment through an FTD device for traffic inspection without creating another IP subnet. How is this accomplished on an FTD device in routed mode?

Which group within Cisco does the Threat Response team use for threat analysis and research?

What are two application layer preprocessors? (Choose two.)

What is a behavior of a Cisco FMC database purge?

With a recent summer time change, system logs are showing activity that occurred to be an hour behind real time. Which action should be taken to resolve this issue?

What is the difference between inline and inline tap on Cisco Firepower?

Which feature within the Cisco FMC web interface allows for detecting, analyzing, and blocking malware in network traffic?

Which Cisco Firepower Threat Defense, which two interface settings are required when configuring a routed interface? (Choose two.)

An engineer is tasked with deploying an internal perimeter firewall that will support multiple DMZs. Each DMZ has a unique private IP subnet range. How is this requirement satisfied?

What are the minimum requirements to deploy a managed device inline?

Which limitation applies to Cisco Firepower Management Center dashboards in a multidomain environment?

Which two actions can be used in an access control policy rule? (Choose two.)

A network administrator is concerned about the high number of malware files affecting users' machines. What must be done within the access control policy in Cisco FMC to address this concern?

A hospital network needs to upgrade their Cisco FMC managed devices and needs to ensure that a disaster recovery process is in place. What must be done in order to minimize downtime on the network?

Which report template field format is available in Cisco FMC?

With Cisco Firepower Threat Defense software, which interface mode must be configured to passively receive traffic that passes through the appliance?

Which Cisco AMP for Endpoints policy is used only for monitoring endpoint activity?

After using Firepower for some time and learning about how it interacts with the network, an administrator is trying to correlate malicious activity with a user. Which widget should be configured to provide this visibility on the Cisco Firepower dashboards?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters