Question 1

An engineer configures a network discovery policy on Cisco FMC. Upon configuration, it is noticed that excessive and misleading events filing the database and overloading the Cisco FMC. A monitored NAT device is executing multiple updates of its operating system in a short period of time. What configuration change must be made to alleviate this issue?

Options :

A : Leave default networks.

B : Change the method to TCP/SYN.

C : Increase the number of entries on the NAT device.

D : Exclude load balancers and NAT devices.

Answer: D

Question 2

What is a behavior of a Cisco FMC database purge?

Options :

A : User login and history data are removed from the database if the User Activity check box is selected.

B : Data can be recovered from the device.

C : The appropriate process is restarted.

D : The specified data is removed from Cisco FMC and kept for two weeks.

Answer: C

Question 3

Due to an Increase in malicious events, a security engineer must generate a threat report to include intrusion events, malware events, and security intelligence events. How Is this information collected in a single report?

Options :

A : Run the default Firepower report.

B : Export the Attacks Risk report.

C : Generate a malware report.

D : Create a Custom report.

Answer: D

Question 4

An engineer configures an access control rule that deploys file policy configurations to security zones or tunnel zones, and it causes the device to restart. What is the reason for the restart?

Options :

A : Source or destination security zones in the access control rule matches the security zones that are associated with interfaces on the target devices.

B : The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the destination policy.

C : Source or destination security zones in the source tunnel zone do not match the security zones that are associated with interfaces on the target devices.

D : The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the source policy.

Answer: A

Question 5

Refer to the exhibit.

What is the effect of the existing Cisco FMC configuration?

Options :

A : The remote management port for communication between the Cisco FMC and the managed device changes to port 8443.

B : The managed device is deleted from the Cisco FMC.

C : The SSL-encrypted communication channel between the Cisco FMC and the managed device becomes plain-text communication channel.

D : The management connection between the Cisco FMC and the Cisco FTD is disabled.

Answer: D