Question 1

Which action must be taken on the Cisco FMC when a packet bypass is configured in case the Snort engine is down or a packet takes too long to process?

Options :

A : Enable Inspect Local Router Traffic

B : Enable Automatic Application Bypass

C : Configure Fastpath rules to bypass inspection

D : Add a Bypass Threshold policy for failures

Answer: B

Question 2

An engineer is configuring Cisco FMC and wants to allow multiple physical interfaces to be part of the same VLAN. The managed devices must be able to perform Layer 2 switching between interfaces, including sub-interfaces. What must be configured to meet these requirements?

Options :

A : interface-based VLAN switching

B : inter-chassis clustering VLAN

C : integrated routing and bridging

D : Cisco ISE Security Group Tag

Answer: C

Question 3

A security analyst must create a new report within Cisco FMC to show an overview of the daily attacks, vulnerabilities, and connections. The analyst wants to reuse specific dashboards from other reports to create this consolidated one. Which action accomplishes this task?

Options :

A : Create a new dashboard object via Object Management to represent the desired views.

B : Modify the Custom Workflows within the Cisco FMC to feed the desired data into the new report.

C : Copy the Malware Report and modify the sections to pull components from other reports.

D : Use the import feature in the newly created report to select which dashboards to add

Answer: D

Question 4

A network administrator notices that SI events are not being updated The Cisco FTD device is unable to load all of the SI event entries and traffic is not being blocked as expected. What must be done to correct this issue?

Options :

A : Restart the affected devices in order to reset the configurations

B : Manually update the SI event entries to that the appropriate traffic is blocked

C : Replace the affected devices with devices that provide more memory

D : Redeploy configurations to affected devices so that additional memory is allocated to the SI module

Answer: D

Question 5

An engineer configures a network discovery policy on Cisco FMC. Upon configuration, it is noticed that excessive and misleading events filing the database and overloading the Cisco FMC. A monitored NAT device is executing multiple updates of its operating system in a short period of time. What configuration change must be made to alleviate this issue?

Options :

A : Leave default networks.

B : Change the method to TCP/SYN.

C : Increase the number of entries on the NAT device.

D : Exclude load balancers and NAT devices.

Answer: D