لا تريد أن تفوت شيئا؟

نصائح اجتياز امتحان الشهادة

آخر أخبار الامتحانات ومعلومات الخصم

برعاية وحديثة من قبل خبرائنا

نعم، أرسل لي النشرة الإخبارية

خذ اختبارات أخرى عبر الإنترنت

السؤال #1
A network administrator notices that SI events are not being updated. The Cisco FTD device is unable to load all of the SI event entries and traffic is not being blocked as expected. What must be done to correct this issue?
A. eplace the affected devices with devices that provide more memory
B. anually update the SI event entries to that the appropriate traffic is blocked
C. estart the affected devices in order to reset the configurations
D. edeploy configurations to affected devices so that additional memory is allocated to the SI module
عرض الإجابة
اجابة صحيحة: D
السؤال #2
An organization has a Cisco FTD that uses bridge groups to pass traffic from the inside interfaces to the outside interfaces. They are unable to gather information about neighboring Cisco devices or use multicast in their environment. What must be done to resolve this issue?
A. reate a firewall rule to allow CDP traffic
B. reate a bridge group with the firewall interfaces
C. hange the firewall mode to transparent
D. hange the firewall mode to routed
عرض الإجابة
اجابة صحيحة: C
السؤال #3
A network security engineer must export packet captures from the Cisco FMC web browser while troubleshooting an issue. When navigating to the address https:///capture/CAPI/pcap/test.pcap, an error 403: Forbidden is given instead of the PCAP file. Which action must the engineer take to resolve this issue?
A. isable the HTTPS server and use HTTP instead
B. nable the HTTPS server for the device platform policy
C. isable the proxy setting on the browser
D. se the Cisco FTD IP address as the proxy server setting on the browser
عرض الإجابة
اجابة صحيحة: B
السؤال #4
An analyst is investigating a potentially compromised endpoint within the network and pulls a host report for the endpoint in question to collect metrics and documentation. What information should be taken from this report for the investigation?
A. hreat detections over time and application protocols transferring malware
B. umber of attacked machines, sources of the attack, and traffic patterns
C. lient applications by user, web applications, and user connections
D. ntrusion events, host connections, and user sessions
عرض الإجابة
اجابة صحيحة: D
السؤال #5
A company has many Cisco FTD devices managed by a Cisco FMC. The security model requires that access control rule logs be collected for analysis. The security engineer is concerned that the Cisco FMC will not be able to process the volume of logging that will be generated. Which configuration addresses this concern?
A. end Cisco FTD connection events directly to a SIEM system and forward security events from Cisco FMC to the SIEM system for storage and analysis
B. end Cisco FTD connection events and security events directly to SIEM system for storage and analysis
C. end Cisco FTD connection events and security events to a cluster of Cisco FMC devices for storage and analysis
D. end Cisco FTD connection events and security events to Cisco FMC and configure it to forward logs to SIEM for storage and analysis
عرض الإجابة
اجابة صحيحة: A
السؤال #6
An engineer is troubleshooting connectivity to the DNS servers from hosts behind a new Cisco FTD device. The hosts cannot send DNS queries to servers in the DMZ. Which action should the engineer take to troubleshoot this issue using the real DNS packets?
A. se the show blocks command in the Threat Defense CLI tool and create a policy to allow the blocked traffic
B. se the packet tracer tool to determine at which hop the packet is being dropped
C. se the packet capture tool to check where the traffic is being blocked and adjust the access control or intrusion policy as needed
D. se the Connection Events dashboard to check the block reason and adjust the inspection policy as needed
عرض الإجابة
اجابة صحيحة: C
السؤال #7
An administrator must use Cisco FMC to install a backup route within the Cisco FTD to route traffic in case of a routing failure with the primary route. Which action accomplishes this task?
A. nstall the static backup route and modify the metric to be less than the primary route
B. reate the backup route and use route tracking on both routes to a destination IP address in the network
C. se a default route on the FMC instead of having multiple routes contending for priority
D. onfigure EIGRP routing on the FMC to ensure that dynamic routes are always updated
عرض الإجابة
اجابة صحيحة: B
السؤال #8
The administrator notices that there is malware present with an exe extension and needs to verify if any of the systems on the network are running the executable file. What must be configured within Cisco AMP for Endpoints to show this data?
A. ulnerable software
B. revalence
C. hreat root cause
D. ile analysis
عرض الإجابة
اجابة صحيحة: B
السؤال #9
An organization is migrating their Cisco ASA devices running in multicontext mode to Cisco FTD devices. Which action must be taken to ensure that each context on the ASA is logically separated in the FTD devices?
A. onfigure the FTD to use port channels spanning multiple networks
B. onfigure a container instance in the FTD for each context in the ASA
C. dd the FTD device to the ASA port channels
D. dd a native instance to distribute traffic to each FTD context
عرض الإجابة
اجابة صحيحة: B
السؤال #10
A Cisco FTD has two physical interfaces assigned to a BVI. Each interface is connected to a different VLAN on the same switch. Which firewall mode is the Cisco FTD set up to support?
A. outed
B. ctive/active failover
C. ransparent
D. igh availability clustering
عرض الإجابة
اجابة صحيحة: A

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:
رقم الواتس اب/الهاتف: