Within Cisco Firepower Management Center, where does a user add or modify widgets?

• A.dashboard
• B.reporting
• C.summary tool
• D.context explorer

Comment: *

Name: *

Email: *

Verification: *

An engineer is troubleshooting connectivity to the DNS servers from hosts behind a new Cisco FTD device.
The hosts cannot send DNS queries to servers in the DMZ. Which action should the engineer take to troubleshoot this issue using the real DNS packets?

• A.Use the packet capture tool to check where the traffic is being blocked and adjust the access control or intrusion policy as needed.
• B.Use the packet tracer tool to determine at which hop the packet is being dropped.
• C.Use the Connection Events dashboard to check the block reason and adjust the inspection policy as needed.
• D.Use the show blocks command in the Threat Defense CLI tool and create a policy to allow the blocked traffic.

Comment: *

Name: *

Email: *

Verification: *

A network engineer implements a new Cisco Firepower device on the network to take advantage of its intrusion detection functionality. There is a requirement to analyze the traffic going across the device, alert on any malicious traffic, and appear as a bump in the wire How should this be implemented?

• A.Add an IP address to the physical Cisco Firepower interfaces.
• B.Enable routing on the Cisco Firepower
• C.Specify the BVl IP address as the default gateway for connected devices.
• D.Configure a bridge group in transparent mode.

Comment: *

Name: *

Email: *

Verification: *

A security engineer is configuring a remote Cisco FTD that has limited resources and internet bandwidth.
Which malware action and protection option should be configured to reduce the requirement for cloud lookups?

• A.Malware Cloud Lookup and dynamic analysis
• B.Block Malware action and dynamic analysis
• C.Block Malware action and local malware analysis
• D.Block File action and local malware analysis

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

An engineer generates troubleshooting files in Cisco Secure Firewall Management Center (FMC). A successfully completed task Is removed before the files are downloaded. Which two actions must be taken to determine the filename and obtain the generated troubleshooting files without regenerating them? (Choose two.)

• A.Use an FTP client Hi expert mode on Secure FMC lo upload the files to the FTP server.
• B.Go to the same screen as shown in the exhibit, click Advanced Troubleshooting, enter the rile name, and then start the download
• C.Connect to CU on the FTD67 and FTD66 devices and copy the tiles from flash to the PIP server.
• D.Go to expert mode on Secure FMC. list the contents of/Var/common, and determine the correct filename from the output
• E.Click System Monitoring, men Audit to determine the correct filename from the line containing the Generate Troubleshooting Files string.

Comment: *

Name: *

Email: *

Verification: *