administrator is configuring SNORT inspection policies and is seeing failed deployment messages in Cisco FMC . What information should the administrator generate for Cisco TAC to help troubleshoot?

• A.A Troubleshoot" file for the device in question.
• B.A "show tech" file for the device in question
• C.A "show tech" for the Cisco FMC.
• D.A "troubleshoot" file for the Cisco FMC

Comment: *

Name: *

Email: *

Verification: *

Which policy rule is included in the deployment of a local DMZ during the initial deployment of a Cisco NGFW through the Cisco FMC GUI?

• A.deny ip any
• B.permit ip any
• C.a default DMZ policy for which only a user can change the IP addresses.
• D.no policy rule is included

Comment: *

Name: *

Email: *

Verification: *

An engineer is troubleshooting a device that cannot connect to a web server. The connection is initiated from the Cisco FTD inside interface and attempting to reach 10.0.1.100 over the non-standard port of 9443 The host the engineer is attempting the connection from is at the IP address of 10.20.10.20. In order to determine what is happening to the packets on the network, the engineer decides to use the FTD packet capture tool Which capture configuration should be used to gather the information needed to troubleshoot this issue?
A)

B)

C)

D)

• A.Option D
• B.Option B
• C.Option A
• D.Option C

Comment: *

Name: *

Email: *

Verification: *

An engainer must add DNS-specific rules to me Cisco FTD intrusion policy. The engineer wants to use the rules currently in the Cisco FTD Snort database that are not already enabled but does not want to enable more than are needed. Which action meets these requirements?

• A.Change the rule state within the policy being used.
• B.Change the base policy to Security over Connectivity.
• C.Change the dynamic state of the rule within the policy.
• D.Change the rules using the Generate and Use Recommendations feature.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit. An engineer is deploying a new instance of Cisco Secure Firewall Threat Defense. Which action must the engineer take next so that Client_A and Client_B receive an IP address via DHCP from Server_A?

• A.Disable all the DHCP Snort rules by using Secure Firewall Device Manager.
• B.Add access rules that allow DHCP traffic by using Cisco Secure Firewall Management Center.
• C.Disable Option 82 in the DHCP relay configuration properties using Secure Firewall Management Center.
• D.Add another DHCP pool on Server_A with DHCP relay on Secure Firewall Threat Defense.

Comment: *

Name: *

Email: *

Verification: *