لا تريد أن تفوت شيئا؟

نصائح اجتياز امتحان الشهادة

آخر أخبار الامتحانات ومعلومات الخصم

برعاية وحديثة من قبل خبرائنا

نعم، أرسل لي النشرة الإخبارية

خذ اختبارات أخرى عبر الإنترنت

السؤال #1
When a Cisco FTD device is configured in transparent firewall mode, on which two interface types can an IP address be configured? (Choose two.)
A. ubinterface
B. VI
C. hysical
D. therChannel
E. iagnostic
عرض الإجابة
اجابة صحيحة: BE
السؤال #2
A network administrator is configuring a site-to-site IPsec VPN to a router sitting behind a Cisco FTD. The administrator has configured an access policy to allow traffic to this device on UDP 500,4500, and ESP. VPN traffic is not working. Which action resolves this issue?
A. hange the access policy to allow all ports
B. odify the NAT policy to use the interface PAT
C. et the allow action in the access policy to trust
D. nable IPsec inspection on the access policy
عرض الإجابة
اجابة صحيحة: D
السؤال #3
An engineer defines a new rule while configuring an Access Control Policy. After deploying the policy, the rule is not working as expected and the hit counters associated with the rule are showing zero. What is causing this error?
A. ogging is not enabled for the rule
B. he wrong source interface for Snort was selected in the rule
C. n incorrect application signature was used in the rule
D. he rule was not enabled after being created
عرض الإجابة
اجابة صحيحة: D
السؤال #4
An engineer must deploy a Cisco FTD device. Management wants to examine traffic without requiring network changes that will disrupt end users. Corporate security policy requires the separation of management traffic from data traffic and the use of SSH over Telnet for remote administration. How must the device be deployed to meet these requirements?
A. n transparent mode with a management interface
B. n routed mode with a diagnostic interface
C. n transparent mode with a data interface
D. n routed mode with a bridge virtual interface
عرض الإجابة
اجابة صحيحة: A
السؤال #5
A security engineer must configure policies for a recently deployed Cisco FTD. The security policy for the company dictates that when five or more connections from external sources are initiated within 2 minutes, there is cause for concern. Which type of policy must be configured in Cisco FMC to generate an alert when this condition is triggered?
A. pplication detector
B. ntrusion
C. orrelation
D. ccess control
عرض الإجابة
اجابة صحيحة: C
السؤال #6
A network administrator must create an EtherChannel interface on a new Cisco Firepower 9300 appliance registered with an FMC for high availability. Where must the administrator create the EtherChannel interface?
A. MC CLI
B. MC GUI
C. XOS CLI
D. TD CLI
عرض الإجابة
اجابة صحيحة: C
السؤال #7
When an engineer captures traffic on a Cisco FTD to troubleshoot a connectivity problem, they receive a large amount of output data in the GUI tool. The engineer found that viewing the captures this way is time- consuming and difficult to sort and filter. Which file type must the engineer export the data in so that it can be reviewed using a tool built for this type of analysis?
A. CAP
B. PFIX
C. etFlow v5
D. etFlow v9
عرض الإجابة
اجابة صحيحة: A
السؤال #8
What is a limitation to consider when running a dynamic routing protocol on a Cisco FTD device in IRB mode?
A. nly nonbridge interfaces are supported
B. nly distance vector routing protocols are supported
C. nly EtherChannel interfaces are supported
D. nly link-state routing protocols are supported
عرض الإجابة
اجابة صحيحة: A
السؤال #9
Network users are experiencing intermittent issues with internet access. An engineer identified that the issue is being caused by NAT exhaustion. How must the engineer change the dynamic NAT configuration to provide internet access for more users without running out of resources?
A. dd an identity NAT rule to handle the overflow of users
B. onvert the dynamic auto NAT rule to dynamic manual NAT
C. onfigure fallthrough to interface PAT on the Advanced tab
D. efine an additional static NAT for the network object in use
عرض الإجابة
اجابة صحيحة: C
السؤال #10
An engineer is configuring URL filtering for a Cisco FTD device in Cisco MC. Users must receive a warning when they access http://www.badadultsite.com with the option of continuing to the website if they choose to. No other websites should be blocked. Which two actions must the engineer take to meet these requirements? (Choose two.)
A. n the HTTP Responses tab of the access control policy editor, set the Block Response Page to Custom
B. n the HTTP Responses tab of the access control policy editor, set the Interactive Block Response Page to System-provided
C. onfigure an access control rule that matches the Adult URL category and set the action to Interactive Block
D. onfigure the default action for the access control policy to Interactive Block
E. onfigure an access control rule that matches an URL object for http://www
عرض الإجابة
اجابة صحيحة: BE

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:
رقم الواتس اب/الهاتف: