Question 1

Which firewall design will allow It to forward traffic at layers 2 and 3 for the same subnet?

Options :

A : Cisco Firepower Threat Defense mode

B : routed mode

C : Integrated routing and bridging

D : transparent mode

Answer: D

Question 2

A network administrator notices that SI events are not being updated The Cisco FTD device is unable to load all of the SI event entries and traffic is not being blocked as expected. What must be done to correct this issue?

Options :

A : Restart the affected devices in order to reset the configurations

B : Manually update the SI event entries to that the appropriate traffic is blocked

C : Replace the affected devices with devices that provide more memory

D : Redeploy configurations to affected devices so that additional memory is allocated to the SI module

Answer: D

Question 3

A network administrator discovers that a user connected to a file server and downloaded a malware file. The Cisc FMC generated an alert for the malware event, however the user still remained connected. Which Cisco APM file rule action within the Cisco FMC must be set to resolve this issue?

Options :

A : Detect Files

B : Malware Cloud Lookup

C : Local Malware Analysis

D : Reset Connection

Answer: D

Question 4

Which action should you take when Cisco Threat Response notifies you that AMP has identified a file as malware?

Options :

A : Add the malicious file to the block list.

B : Send a snapshot to Cisco for technical support.

C : Forward the result of the investigation to an external threat-analysis engine.

D : Wait for Cisco Threat Response to automatically block the malware.

Answer: A

Question 5

A network administrator configured a NAT policy that translates a public IP address to an internal web server IP address. An access policy has also been created that allows any source to reach the public IP address on port 80. The web server is still not reachable from the Internet on port 80. Which configuration change is needed?

Options :

A : The intrusion policy must be disabled for port 80.

B : The access policy rule must be configured for the action trust.

C : The NAT policy must be modified to translate the source IP address as well as destination IP address.

D : The access policy must allow traffic to the internal web server IP address.

Answer: D