Question 1

An administrator configures new threat intelligence sources and must validate that the feeds are being downloaded and that the intelligence is being used within the Cisco Secure Firewall system. Which action accomplishes the task?

Options :

A : Look at the connection security intelligence events

B : Use the source status indicator to validate the usage

C : View the threat intelligence observables to see the downloaded data

D : Look at the access control policy to validate that the intelligence is being used

Answer: B

Question 2

An engineer is configuring Cisco FMC and wants to allow multiple physical interfaces to be part of the same VLAN. The managed devices must be able to perform Layer 2 switching between interfaces, including sub-interfaces. What must be configured to meet these requirements?

Options :

A : interface-based VLAN switching

B : inter-chassis clustering VLAN

C : integrated routing and bridging

D : Cisco ISE Security Group Tag

Answer: C

Question 3

When do you need the file-size command option during troubleshooting with packet capture?

Options :

A : when capture packets are less than 16 MB

B : when capture packets are restricted from the secondary memory

C : when capture packets exceed 10 GB

D : when capture packets exceed 32 MB

Answer: D

Question 4

An engineer is implementing a new Cisco Secure Firewall. The firewall must filler traffic between the three subnets: • LAN 192.168.101.0724 • DMZ 192.168 200.0/24 • WAN 10.0.0.0/30 Which firewall mode must the engineer implement?

Options :

A : transparent

B : network

C : routed

D : gateway

Answer: C

Question 5

An organization has implemented Cisco Firepower without IPS capabilities and now wants to enable inspection for their traffic. They need to be able to detect protocol anomalies and utilize the Snort rule sets to detect malicious behaviour. How is this accomplished?

Options :

A : Modify the access control policy to redirect interesting traffic to the engine

B : Modify the network discovery policy to detect new hosts to inspect

C : Modify the network analysis policy to process the packets for inspection

D : Modify the intrusion policy to determine the minimum severity of an event to inspect.

Answer: D