Question 1

A security engineer must deploy a Cisco FTD appliance as a bump in the wire to detect intrusion events without disrupting the flow of network traffic. Which two features must be configured to accomplish the task? (Choose two.)

Options :

A : inline set pair

B : transparent mode

C : tapemode

D : passive interfaces

E : bridged mode

Answer: B,C

Question 2

A security analyst must create a new report within Cisco FMC to show an overview of the daily attacks, vulnerabilities, and connections. The analyst wants to reuse specific dashboards from other reports to create this consolidated one. Which action accomplishes this task?

Options :

A : Create a new dashboard object via Object Management to represent the desired views.

B : Modify the Custom Workflows within the Cisco FMC to feed the desired data into the new report.

C : Copy the Malware Report and modify the sections to pull components from other reports.

D : Use the import feature in the newly created report to select which dashboards to add

Answer: D

Question 3

An administrator is configuring the interface of a Cisco Secure Firewall Threat Defense device in a passive IPS deployment. The device and interface have been identified. Which set of configuration steps of the administrator take next to complete the implementation?

Options :

A : Set the interface mode to passive. Associate the interface with a security zone. Enable the interface. Set the MTU parameter.

B : Modify the interface to retransmit received traffic. Associate the interface with a security zone Set the MTU parameter

C : Set the interface mode to passive. Associate the interface with a security zone. Set the MTU parameter. Reset the interface.

D : Modify the interface to retransmit received traffic. Associate the interface with a security zone. Enable the interface. Set the MTU parameter.

Answer: C

Question 4

An engineer is vorlang on a LAN switch and has noticed that its network connection to the mime Cisco IPS has gone down Upon troubleshooting it is determined that the switch is working as expected What must have been implemented for this failure to occur?

Options :

A : The upstream router has a misconfigured routing protocol

B : Link-state propagation is enabled

C : The Cisco IPS has been configured to be in fail-open mode

D : The Cisco IPS is configured in detection mode

Answer: D

Question 5

An engineer is configuring a custom application detector for HTTP traffic and wants to import a file that was provided by a third party. Which type of flies are advanced application detectors creates and uploaded as?

Options :

A : Perl script

B : NBAR protocol

C : LUA script

D : Python program

Answer: C