IT Certification Exam Questions & Answers

QUESTION 71
An engineer is setting up a new Firepower deployment and is looking at the default FMC policies to start the implementation. During the initial trial phase, the organization wants to test some common Snort rules while still allowing the majority of network traffic to pass. Which default policy should be used?

QUESTION 72
What is the result of specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?

QUESTION 73
Which CLI command is used to generate firewall debug messages on a Cisco Firepower?

QUESTION 74
Which Cisco Firepower feature is used to reduce the number of events received in a period of time?

QUESTION 75
An administrator is setting up Cisco Firepower to send data to the Cisco Stealthwatch appliances. The NetFlow_Set_Parameters object is already created, but NetFlow is not being sent to the flow collector. What must be done to prevent this from occurring?

QUESTION 76
Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD? (Choose two.)

QUESTION 77
Which two remediation options are available when Cisco FMC is integrated with Cisco ISE? (Choose two.)

QUESTION 78
What is the advantage of having Cisco Firepower devices send events to Cisco Threat response via the security services exchange portal directly as opposed to using syslog?

QUESTION 79
An administrator must use Cisco FMC to install a backup route within the Cisco FTD to route traffic in case of a routing failure with the primary route. Which action accomplishes this task?

QUESTION 80
Which Cisco Firepower rule action displays an HTTP warning page?

QUESTION 81
Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?

QUESTION 82
An engineer runs the command restore remote-manager-backup location 2.2.2.2 admin /Volume/home/admin FTD408566513.zip on a Cisco FMC. After connecting to the repository, the Cisco FTD device is unable to accept the backup file. What is the reason for this failure?

QUESTION 83
A security engineer is configuring an Access Control Policy for multiple branch locations. These locations share a common rule set and utilize a network object called INSIDE_NET which contains the locally significant internal network subnets at each location. What technique will retain the policy consistency at each location but allow only the locally significant network subnet within the application rules?

QUESTION 84
Which two conditions must be met to enable high availability between two Cisco FTD devices? (Choose two.)

QUESTION 85
Within an organization’s high availability environment where both firewalls are passing traffic, traffic must be segmented based on which department it is destined for. Each department is situated on a different LAN. What must be configured to meet these requirements?

QUESTION 86
What is the advantage of having Cisco Firepower devices send events to Cisco Threat response via the security services exchange portal directly as opposed to using syslog?

QUESTION 87
What are two application layer preprocessors? (Choose two.)

QUESTION 88
Which two deployment types support high availability? (Choose two.)

QUESTION 89
Within Cisco Firepower Management Center, where does a user add or modify widgets?

QUESTION 90
An engineer currently has a Cisco FTD device registered to the Cisco FMC and is assigned the address of 10 10.50.12. The organization is upgrading the addressing schemes and there is a requirement to convert the addresses to a format that provides an adequate amount of addresses on the network What should the engineer do to ensure that the new addressing takes effect and can be used for the Cisco FTD to Cisco FMC connection?

QUESTION 91
Which CLI command is used to control special handling of ClientHello messages?