Which command-line mode is supported from the Cisco Firepower Management Center CLI?

• A.privileged
• B.admin
• C.configuration
• D.user

Comment: *

Name: *

Email: *

Verification: *

Network traffic coining from an organization's CEO must never be denied. Which access control policy configuration option should be used if the deployment engineer is not permitted to create a rule to allow all traffic?

• A.Configure a trust policy for the CEO.
• B.Change the intrusion policy from security to balance.
• C.Configure firewall bypass.
• D.Create a NAT policy just for the CEO.

Comment: *

Name: *

Email: *

Verification: *

What is the result of specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?

• A.Matching traffic is not rate limited.
• B.The rate-limiting rule is disabled.
• C.The system repeatedly generates warnings.
• D.The system rate-limits all traffic.

Comment: *

Name: *

Email: *

Verification: *

A network administrator notices that inspection has been interrupted on all non-managed interfaces of a device. What is the cause of this?

• A.The value of the highest MSS assigned to any non-management interface was changed.
• B.A passive interface was associated with a security zone.
• C.Multiple inline interface pairs were added to the same inline interface.
• D.The value of the highest MTU assigned to any non-management interface was changed.

Comment: *

Name: *

Email: *

Verification: *

A network engineer is tasked with minimising traffic interruption during peak traffic limes. When the SNORT inspection engine is overwhelmed, what must be configured to alleviate this issue?

• A.Set a Trust ALL access control policy.
• B.Enable Automatic Application Bypass.
• C.Enable IPS inline link state propagation
• D.Enable Pre-filter policies before the SNORT engine failure.

Comment: *

Name: *

Email: *

Verification: *