An engineer is configuring a cisco FTD appliance in IPS-only mode and needs to utilize fail-to-wire interfaces.
Which interface mode should be used to meet these requirements?

• A.transparent
• B.routed
• C.passive
• D.inline set

Comment: *

Name: *

Email: *

Verification: *

A network engineer must configure IPS mode on a Cisco Secure firewall Threat Defense device to inspect traffic and act as an IDS. The engineer already configured the passive-interface on the secure firewall threat Defence device and SPAN on the switch. What must be configured next by the engineer?

• A.intrusion policy on the Secure Firewall Threat Defense device
• B.active Interface on me Secure Firewall threat Defense device
• C.DHCP on the switch
• D.active SPAN port on the switch

Comment: *

Name: *

Email: *

Verification: *

What is a result of enabling Cisco FTD clustering?

• A.For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections.
• B.Integrated Routing and Bridging is supported on the master unit.
• C.Site-to-site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails.
• D.All Firepower appliances can support Cisco FTD clustering.

Comment: *

Name: *

Email: *

Verification: *

Which object type supports object overrides?

• A.time range
• B.security group tag
• C.network object
• D.DNS server group

Comment: *

Name: *

Email: *

Verification: *

Which interface type allows packets to be dropped?

• A.ERSPAN
• B.inline
• C.passive
• D.TAP

Comment: *

Name: *

Email: *

Verification: *