Question 1

A network administrator discovers that a user connected to a file server and downloaded a malware file. The Cisc FMC generated an alert for the malware event, however the user still remained connected. Which Cisco APM file rule action within the Cisco FMC must be set to resolve this issue?

Options :

A : Detect Files

B : Malware Cloud Lookup

C : Local Malware Analysis

D : Reset Connection

Answer: D

Question 2

When do you need the file-size command option during troubleshooting with packet capture?

Options :

A : when capture packets are less than 16 MB

B : when capture packets are restricted from the secondary memory

C : when capture packets exceed 10 GB

D : when capture packets exceed 32 MB

Answer: D

Question 3

Which two dynamic routing protocols are supported in Firepower Threat Defense without using FlexConfig? (Choose two.)

Options :

A : EIGRP

B : OSPF

C : static routing

D : IS-IS

E : BGP

Answer: A,B

Question 4

A network administrator has converted a Cisco FTD from using LDAP to LDAPS for VPN authentication. The Cisco FMC can connect to the LDAPS server, but the Cisco FTD is not connecting. Which configuration must be enabled on the Cisco FTD?

Options :

A : SSL must be set to a use TLSv1.2 or lower.

B : The LDAPS must be allowed through the access control policy.

C : DNS servers must be defined for name resolution.

D : The RADIUS server must be defined.

Answer: B

Question 5

What are the minimum requirements to deploy a managed device inline?

Options :

A : inline interfaces, security zones, MTU, and mode

B : passive interface, MTU, and mode

C : inline interfaces, MTU, and mode

D : passive interface, security zone, MTU, and mode

Answer: C