Question 1

An administrator configures new threat intelligence sources and must validate that the feeds are being downloaded and that the intelligence is being used within the Cisco Secure Firewall system. Which action accomplishes the task?

Options :

A : Look at the connection security intelligence events

B : Use the source status indicator to validate the usage

C : View the threat intelligence observables to see the downloaded data

D : Look at the access control policy to validate that the intelligence is being used

Answer: B

Question 2

Network users are experiencing Intermittent issues with internet access. An engineer ident med mat the issue Is being caused by NAT exhaustion. How must the engineer change the dynamic NAT configuration to provide internet access for more users without running out of resources?

Options :

A : Define an additional static NAT for the network object in use.

B : Configure fallthrough to interface PAT on 'he Advanced tab.

C : Convert the dynamic auto NAT rule to dynamic manual NAT.

D : Add an identity NAT rule to handle the overflow of users.

Answer: B

Question 3

A network administrator notices that SI events are not being updated The Cisco FTD device is unable to load all of the SI event entries and traffic is not being blocked as expected. What must be done to correct this issue?

Options :

A : Restart the affected devices in order to reset the configurations

B : Manually update the SI event entries to that the appropriate traffic is blocked

C : Replace the affected devices with devices that provide more memory

D : Redeploy configurations to affected devices so that additional memory is allocated to the SI module

Answer: D

Question 4

An engineer must configure a Cisco FMC dashboard in a child domain. Which action must be taken so that the dashboard is visible to the parent domain?

Options :

A : Add a separate tab.

B : Adjust policy inheritance settings.

C : Add a separate widget.

D : Create a copy of the dashboard.

Answer: D

Question 5

Which action should be taken after editing an object that is used inside an access control policy?

Options :

A : Delete the existing object in use.

B : Refresh the Cisco FMC GUI for the access control policy.

C : Redeploy the updated configuration.

D : Create another rule using a different object name.

Answer: C