Question 1

What is the benefit of selecting the trace option for packet capture?

Accepted Answer

A)  The option indicates whether the packet was dropped or successful. 
B)  The option indicates whether the destination host responds through a different path. 
C)  The option limits the number of packets that are captured. 
D)  The option captures details of each packet. 
A)  The option indicates whether the packet was dropped or successful. 
B)  The option indicates whether the destination host responds through a different path. 
C)  The option limits the number of packets that are captured. 
D)  The option captures details of each packet.

Question 2

Which two remediation options are available when Cisco FMC is integrated with Cisco ISE? (Choose two.)

Accepted Answer

A)  dynamic null route configured 
B)  DHCP pool disablement 
C)  quarantine 
D)  port shutdown 
E)  host shutdown 
A)  dynamic null route configured 
B)  DHCP pool disablement 
C)  quarantine 
D)  port shutdown 
E)  host shutdown

Question 3

An organization has a compliance requirement to protect servers from clients, however, the clients and servers all reside on the same Layer 3 network. Without readdressing IP subnets for clients or servers, how is segmentation achieved?

Accepted Answer

A)  Change the IP addresses of the servers, while remaining on the same subnet. 
B)  Deploy a firewall in routed mode between the clients and servers. 
C)  Change the IP addresses of the clients, while remaining on the same subnet. 
D)  Deploy a firewall in transparent mode between the clients and servers. 
A)  Change the IP addresses of the servers, while remaining on the same subnet. 
B)  Deploy a firewall in routed mode between the clients and servers. 
C)  Change the IP addresses of the clients, while remaining on the same subnet. 
D)  Deploy a firewall in transparent mode between the clients and servers.

Question 4

Refer to the exhibit. An engineer is analyzing the Attacks Risk Report and finds that there are over 300 instances of new operating systems being seen on the network. How is the Firepower configuration updated to protect these new operating systems?

Accepted Answer

A)  The administrator manually updates the policies. 
B)  The administrator requests a Remediation Recommendation Report from Cisco Firepower. 
C)  Cisco Firepower gives recommendations to update the policies. 
D)  Cisco Firepower automatically updates the policies. 
A)  The administrator manually updates the policies. 
B)  The administrator requests a Remediation Recommendation Report from Cisco Firepower. 
C)  Cisco Firepower gives recommendations to update the policies. 
D)  Cisco Firepower automatically updates the policies.

Question 5

A mid-sized company is experiencing higher network bandwidth utilization due to a recent acquisition. The network operations team is asked to scale up their one Cisco FTD appliance deployment to higher capacities due to the increased network bandwidth. Which design option should be used to accomplish this goal?

Accepted Answer

A)  Deploy multiple Cisco FTD HA pairs in clustering mode to increase performance. 
B)  Deploy multiple Cisco FTD appliances in firewall clustering mode to increase performance. 
C)  Deploy multiple Cisco FTD appliances using VPN load-balancing to scale performance. 
D)  Deploy multiple Cisco FTD HA pairs to increase performance. 
A)  Deploy multiple Cisco FTD HA pairs in clustering mode to increase performance. 
B)  Deploy multiple Cisco FTD appliances in firewall clustering mode to increase performance. 
C)  Deploy multiple Cisco FTD appliances using VPN load-balancing to scale performance. 
D)  Deploy multiple Cisco FTD HA pairs to increase performance.

Question 6

An administrator is working on a migration from Cisco ASA to the Cisco FTD appliance and needs to test the rules without disrupting the traffic. Which policy type should be used to configure the ASA rules during this phase of the migration?

Accepted Answer

A)  Prefilter 
B)  Intrusion 
C)  Access Control 
D)  Identity 
A)  Prefilter 
B)  Intrusion 
C)  Access Control 
D)  Identity

Question 7

Which two features of Cisco AMP for Endpoints allow for an uploaded file to be blocked? (Choose two.)

Accepted Answer

A)  application blocking 
B)  simple custom detection 
C)  file repository 
D)  exclusions 
E)  application whitelisting 
A)  application blocking 
B)  simple custom detection 
C)  file repository 
D)  exclusions 
E)  application whitelisting

Question 8

What is a feature of Cisco AMP private cloud?

Accepted Answer

A)  It disables direct connections to the public cloud. 
B)  It supports security intelligence filtering. 
C)  It support anonymized retrieval of threat intelligence. 
D)  It performs dynamic analysis. 
A)  It disables direct connections to the public cloud. 
B)  It supports security intelligence filtering. 
C)  It support anonymized retrieval of threat intelligence. 
D)  It performs dynamic analysis.

Question 9

How many report templates does the Cisco Firepower Management Center support?

Accepted Answer

A)  20 
B)  10 
C)  5 
D)  unlimited 
A)  20 
B)  10 
C)  5 
D)  unlimited

Question 10

A network engineer is receiving reports of users randomly getting disconnected from their corporate applications which traverse the data center FTD appliance. Network monitoring tools show that the FTD appliance utilization is peaking above 90% of total capacity. What must be done in order to further analyze this issue?

Accepted Answer

A)  Use the Packet Export feature to save data onto external drives. 
B)  Use the Packet Capture feature to collect real-time network traffic. 
C)  Use the Packet Tracer feature for traffic policy analysis. 
D)  Use the Packet Analysis feature for capturing network data. 
A)  Use the Packet Export feature to save data onto external drives. 
B)  Use the Packet Capture feature to collect real-time network traffic. 
C)  Use the Packet Tracer feature for traffic policy analysis. 
D)  Use the Packet Analysis feature for capturing network data.

Question 11

A network engineer is logged into the Cisco AMP for Endpoints console and sees a malicious verdict for an identified SHA-256 hash. Which configuration is needed to mitigate this threat?

Accepted Answer

A)  Add the hash to the simple custom detection list 
B)  Use regular expressions to block the malicious file 
C)  Enable a personal firewall in the infected endpoint 
D)  Add the hash from the infected endpoint to the network block list 
A)  Add the hash to the simple custom detection list 
B)  Use regular expressions to block the malicious file 
C)  Enable a personal firewall in the infected endpoint 
D)  Add the hash from the infected endpoint to the network block list

Question 12

Which command is entered in the Cisco FMC CLI to generate a troubleshooting file?

Accepted Answer

A)  show running-config 
B)  show tech-support chassis 
C)  system support diagnostic-cli 
D)  sudo sf_troubleshoot.pl 
A)  show running-config 
B)  show tech-support chassis 
C)  system support diagnostic-cli 
D)  sudo sf_troubleshoot.pl

Question 13

Refer to the exhibit. An administrator is looking at some of the reporting capabilities for Cisco Firepower and noticed this section of the Network Risk Report showing a lot of SSL activity that could be used for evasion. Which action will mitigate this risk?

Accepted Answer

A)  Use SSL decryption to analyze the packets. 
B)  Use Cisco Tetration to track SSL connections to servers. 
C)  Use encrypted traffic analytics to detect attacks. 
D)  Use Cisco AMP for Endpoints to block all SSL connection. 
A)  Use SSL decryption to analyze the packets. 
B)  Use Cisco Tetration to track SSL connections to servers. 
C)  Use encrypted traffic analytics to detect attacks. 
D)  Use Cisco AMP for Endpoints to block all SSL connection.

Question 14

An engineer is implementing Cisco FTD in the network and is determining which Firepower mode to use. The organization needs to have multiple virtual Firepower devices working separately inside of the FTD appliance to provide traffic segmentation. Which deployment mode should be configured in the Cisco Firepower Management Console to support these requirements?

Accepted Answer

A)  multi-instance 
B)  multiple deployment 
C)  single deployment 
D)  single-context 
A)  multi-instance 
B)  multiple deployment 
C)  single deployment 
D)  single-context

Question 15

An engineer configures an access control rule that deploys file policy configurations to security zone or tunnel zones, and it causes the device to restart. What is the reason for the restart?

Accepted Answer

A)  Source or destination security zones in the access control rule matches the security zones that are associated with interfaces on the target devices. 
B)  The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the destination policy. 
C)  Source or destination security zones in the source tunnel zone do not match the security zones that are associated with interfaces on the target devices. 
D)  The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the source policy. 
A)  Source or destination security zones in the access control rule matches the security zones that are associated with interfaces on the target devices. 
B)  The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the destination policy. 
C)  Source or destination security zones in the source tunnel zone do not match the security zones that are associated with interfaces on the target devices. 
D)  The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the source policy.

Question 16

An organization is setting up two new Cisco FTD devices to replace their current firewalls and cannot have any network downtime. During the setup process, the synchronization between the two devices is failing. What action is needed to resolve this issue?

Accepted Answer

A)  Confirm that both devices are running the same software version. 
B)  Confirm that both devices are configured with the same types of interfaces. 
C)  Confirm that both devices have the same flash memory sizes. 
D)  Confirm that both devices have the same port-channel numbering. 
A)  Confirm that both devices are running the same software version. 
B)  Confirm that both devices are configured with the same types of interfaces. 
C)  Confirm that both devices have the same flash memory sizes. 
D)  Confirm that both devices have the same port-channel numbering.

Question 17

Which two routing options are valid with Cisco FTD? (Choose two.)

Accepted Answer

A)  BGPv6 
B)  ECMP with up to three equal cost paths across multiple interfaces 
C)  ECMP with up to three equal cost paths across a single interface 
D)  BGPv4 in transparent firewall mode 
E)  BGPv4 with nonstop forwarding 
A)  BGPv6 
B)  ECMP with up to three equal cost paths across multiple interfaces 
C)  ECMP with up to three equal cost paths across a single interface 
D)  BGPv4 in transparent firewall mode 
E)  BGPv4 with nonstop forwarding

Question 18

An engineer has been asked to show application usages automatically on a monthly basis and send the information to management. What mechanism should be used to accomplish this task?

Accepted Answer

A)  reports 
B)  context explorer 
C)  dashboards 
D)  event viewer 
A)  reports 
B)  context explorer 
C)  dashboards 
D)  event viewer

Question 19

Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD? (Choose two.)

Accepted Answer

A)  OSPFv2 with IPv6 capabilities 
B)  virtual links 
C)  SHA authentication to OSPF packets 
D)  area boundary router type 1 LSA filtering 
E)  MD5 authentication to OSPF packets 
A)  OSPFv2 with IPv6 capabilities 
B)  virtual links 
C)  SHA authentication to OSPF packets 
D)  area boundary router type 1 LSA filtering 
E)  MD5 authentication to OSPF packets

Question 20

Which object type supports object overrides?

Accepted Answer

A)  time range 
B)  security group tag 
C)  network object 
D)  DNS server group 
A)  time range 
B)  security group tag 
C)  network object 
D)  DNS server group

Exam 23: Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

What is the benefit of selecting the trace option for packet capture?

Which two remediation options are available when Cisco FMC is integrated with Cisco ISE? (Choose two.)

An organization has a compliance requirement to protect servers from clients, however, the clients and servers all reside on the same Layer 3 network. Without readdressing IP subnets for clients or servers, how is segmentation achieved?

Refer to the exhibit. An engineer is analyzing the Attacks Risk Report and finds that there are over 300 instances of new operating systems being seen on the network. How is the Firepower configuration updated to protect these new operating systems?

An administrator is working on a migration from Cisco ASA to the Cisco FTD appliance and needs to test the rules without disrupting the traffic. Which policy type should be used to configure the ASA rules during this phase of the migration?

Which two features of Cisco AMP for Endpoints allow for an uploaded file to be blocked? (Choose two.)

What is a feature of Cisco AMP private cloud?

How many report templates does the Cisco Firepower Management Center support?

A network engineer is logged into the Cisco AMP for Endpoints console and sees a malicious verdict for an identified SHA-256 hash. Which configuration is needed to mitigate this threat?

Which command is entered in the Cisco FMC CLI to generate a troubleshooting file?

Refer to the exhibit. An administrator is looking at some of the reporting capabilities for Cisco Firepower and noticed this section of the Network Risk Report showing a lot of SSL activity that could be used for evasion. Which action will mitigate this risk?

An engineer configures an access control rule that deploys file policy configurations to security zone or tunnel zones, and it causes the device to restart. What is the reason for the restart?

An organization is setting up two new Cisco FTD devices to replace their current firewalls and cannot have any network downtime. During the setup process, the synchronization between the two devices is failing. What action is needed to resolve this issue?

Which two routing options are valid with Cisco FTD? (Choose two.)

An engineer has been asked to show application usages automatically on a monthly basis and send the information to management. What mechanism should be used to accomplish this task?

Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD? (Choose two.)

Which object type supports object overrides?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters