- (Exam Topic 5)
A network administrator is concerned about (he high number of malware files affecting users' machines. What must be done within the access control policy in Cisco FMC to address this concern?

1. A. Create an intrusion policy and set the access control policy to block.
2. B. Create an intrusion policy and set the access control policy to allow.
3. C. Create a file policy and set the access control policy to allow.
4. D. Create a file policy and set the access control policy to block.

Correct Answer: D

- (Exam Topic 4)
Which Cisco Advanced Malware Protection for Endpoints policy is used only for monitoring endpoint actively?

1. A. Windows domain controller
2. B. audit
3. C. triage
4. D. protection

Correct Answer: B
Reference: https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/214933-amp-for-endpoints- deployment-methodology.html

- (Exam Topic 1)
A Cisco FTD has two physical interfaces assigned to a BVI. Each interface is connected to a different VLAN on the same switch. Which firewall mode is the Cisco FTD set up to support?

1. A. active/active failover
2. B. transparent
3. C. routed
4. D. high availability clustering

Correct Answer: B

- (Exam Topic 5)
An engineer is monitoring network traffic from their sales and product development departments, which are on two separate networks What must be configured in order to maintain data privacy for both departments?

1. A. Use a dedicated IPS inline set for each department to maintain traffic separation
2. B. Use 802 1Q mime set Trunk interfaces with VLANs to maintain logical traffic separation
3. C. Use passive IDS ports for both departments
4. D. Use one pair of inline set in TAP mode for both departments

Correct Answer: B

- (Exam Topic 5)
An engineer defines a new rule while configuring an Access Control Policy. After deploying the policy, the rule is not working as expected and the hit counters associated with the rule are showing zero. What is causing this error?

1. A. Logging is not enabled for the rule.
2. B. The rule was not enabled after being created.
3. C. The wrong source interface for Snort was selected in the rule.
4. D. An incorrect application signature was used in the rule.

Correct Answer: B