- (Exam Topic 5)
What is a feature of Cisco AMP private cloud?

1. A. It supports anonymized retrieval of threat intelligence
2. B. It supports security intelligence filtering.
3. C. It disables direct connections to the public cloud.
4. D. It performs dynamic analysis

Correct Answer: C

- (Exam Topic 3)
Which CLI command is used to generate firewall debug messages on a Cisco Firepower?

1. A. system support firewall-engine-debug
2. B. system support ssl-debug
3. C. system support platform
4. D. system support dump-table

Correct Answer: A
Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212330-firepower- management-center-display-acc.html

- (Exam Topic 5)
An organization has noticed that malware was downloaded from a website that does not currently have a known bad reputation. How will this issue be addresses globally in the quickest way possible and with the least amount of impact?

1. A. by denying outbound web access
2. B. Cisco Talos will automatically update the policies.
3. C. by Isolating the endpoint
4. D. by creating a URL object in the policy to block the website

Correct Answer: D

- (Exam Topic 5)
An engineer is setting up a new Firepower deployment and is looking at the default FMC policies to start the implementation During the initial trial phase, the organization wants to test some common Snort rules while still allowing the majority of network traffic to pass Which default policy should be used?

1. A. Maximum Detection
2. B. Security Over Connectivity
3. C. Balanced Security and Connectivity
4. D. Connectivity Over Security

Correct Answer: C
https://www.cisco.com/c/en/us/td/docs/security/firepower/623/fdm/fptd-fdm-config-guide-623/fptd-fdm-intrusio

- (Exam Topic 5)
An administrator needs to configure Cisco FMC to send a notification email when a data transfer larger than 10 MB is initiated from an internal host outside of standard business hours. Which Cisco FMC feature must be configured to accomplish this task?

1. A. file and malware policy
2. B. application detector
3. C. intrusion policy
4. D. correlation policy

Correct Answer: A