A network administrator reviews the file report for the last month and notices that all file types, except exe.
show a disposition of unknown. What is the cause of this issue?

• A.The malware license has not been applied to the Cisco FTD.
• B.The Cisco FMC cannot reach the Internet to analyze files.
• C.A file policy has not been applied to the access policy.
• D.Only Spero file analysis is enabled.

Comment: *

Name: *

Email: *

Verification: *

In a multi-tennent deployment where multiple domains are in use. which update should be applied outside of the Global Domain?

• A.local import of major upgrade
• B.Cisco Geolocation Database
• C.minor upgrade
• D.local import of intrusion rules

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit. An engineer generates troubleshooting files in Cisco Secure Firewall Management Center (FMC). A successfully completed task is removed before the files are downloaded. Which two actions must be taken to determine the filename and obtain the generated troubleshooting files without regenerating them? (Choose two.)

• A.Use an FTP client Hi expert mode on Secure FMC to upload the files to the FTP server.
• B.Go to the same screen as shown in the exhibit, click Advanced Troubleshooting, enter the rile name, and then start the download
• C.Connect to CU on the FTD67 and FTD66 devices and copy the tiles from flash to the PIP server.
• D.Go to expert mode on Secure FMC, list the contents of/Var/common, and determine the correct filename from the output
• E.Click System Monitoring, then Audit to determine the correct filename from the line containing the Generate Troubleshooting Files string.

Comment: *

Name: *

Email: *

Verification: *

A network engineer is deploying a Cisco Firepower 4100 appliance and must configure a multi-instance environment for high availability. Drag and drop me actions from the left into sequence on the right far this configuration.

Correct Answer:

Explanation:
The correct sequence of actions for configuring a multi-instance environment for high availability on a Cisco Firepower 4100 appliance is as follows:
* Add a resource profile for container instances. A resource profile defines the CPU, RAM, and disk space allocation for each container instance.You can create multiple resource profiles with different resource settings and assign them to different container instances1.
* Add a MAC pool prefix and view the MAC address for the container instance interfaces. A MAC pool prefix is a 24-bit prefix that is used to generate MAC addresses for the container instance interfaces.
You can specify a custom MAC pool prefix or use the default one.You can also view the MAC addresses that are assigned to each container instance interface1.
* Configure interfaces. You need to configure the physical interfaces, EtherChannels, and VLAN subinterfaces that will be used by the container instances.You can also configure shared interfaces that can be used by multiple container instances on the same security module/engine1.
* Add a Standalone Firepower Threat Defense for Cisco Secure Firewall Management Center. You need to add a logical device that runs a standalone Firepower ThreatDefense (FTD) application instance and register it with the Cisco Secure Firewall Management Center (FMC).This logical device will act as the management interface for the container instances1.
* Add a high-availability pair. You need to add another logical device that runs a standalone FTD application instance and register it with the FMC as well. Then, you need to configure high availability (HA) between the two standalone FTD logical devices.This will enable HA for the container instances that are associated with them1.

Comment: *

Name: *

Email: *

Verification: *

An engineer is building a new access control policy using Cisco FMC. The policy must inspect a unique IPS policy as well as log rule matching.
Which action must be taken to meet these requirements?

• A.Configure an IPS policy and enable per-rule logging.
• B.Disable the default IPS policy and enable global logging.
• C.Configure an IPS policy and enable global logging.
• D.Disable the default IPS policy and enable per-rule logging.

Comment: *

Name: *

Email: *

Verification: *