The security engineer reviews the syslog server events of an organization and sees many outbound connections to malicious sites initiated from hosts running Cisco Secure Endpoint. The hosts are on a separate network from the Cisco FTD device. Which action blocks the connections?

• A.Add a Cisco Secure Endpoint policy with the Tetra and Spero engines enabled
• B.Modify the access control policy on the Cisco FMC to block malicious outbound connections
• C.Modify the policy on Cisco Secure Endpoint to enable DFC.
• D.Add the IP addresses of the malicious sites to the access control policy on the Cisco FMC

Comment: *

Name: *

Email: *

Verification: *

Which two routing options are valid with Cisco Firepower Threat Defense? (Choose two.)

• A.BGPv6
• B.ECMP with up to three equal cost paths across multiple interfaces
• C.ECMP with up to three equal cost paths across a single interface
• D.BGPv4 in transparent firewall mode
• E.BGPv4 with nonstop forwarding

Comment: *

Name: *

Email: *

Verification: *

An engineer is configuring URL filtering for a Cisco FTD device in Cisco FMC. Users must receive a warning when they access http://www.badadultsite.com with the option of continuing to the website if they choose to. No other websites should be blocked. Which two actions must the engineer take to meet these requirements? (Choose two.)

• A.On the HTTP Responses tab of the access control policy editor, set the Interactive Block Response Page to System-provided.
• B.Configure the default action for the access control policy to Interactive Block.
• C.Configure an access control rule that matches an URL object for http://www.badadultsite.com/ and set the action to Interactive Block.
• D.Configure an access control rule that matches the Adult URL category and set the action to Interactive Block.
• E.On the HTTP Responses tab of the access control policy editor, set the Block Response Page to Custom.

Comment: *

Name: *

Email: *

Verification: *

Drag and Drop Question
Drag and drop the configuration steps from the left into the sequence on the right to enable external authentication on Cisco FMC to a RADIUS server.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

An administrator must use Cisco FMC to install a backup route within the Cisco FTD to route traffic in case of a routing failure with the primary route. Which action accomplishes this task?

• A.Install the static backup route and modify the metric to be less than the primary route.
• B.Configure EIGRP routing on the FMC to ensure that dynamic routes are always updated.
• C.Create the backup route and use route tracking on both routes to a destination IP address in the network.
• D.Use a default route on the FMC instead of having multiple routes contending for priority.

Comment: *

Name: *

Email: *

Verification: *