- (Exam Topic 1)
An engineer is configuring a Cisco IPS to protect the network and wants to test a policy before deploying it. A copy of each incoming packet needs to be monitored while traffic flow remains constant. Which IPS mode should be implemented to meet these requirements?

1. A. Inline tap
2. B. passive
3. C. transparent
4. D. routed

Correct Answer: A

- (Exam Topic 5)
An engineer has been tasked with providing disaster recovery for an organization's primary Cisco FMC. What must be done on the primary and secondary Cisco FMCs to ensure that a copy of the original corporate policy is available if the primary Cisco FMC fails?

1. A. Configure high-availability in both the primary and secondary Cisco FMCs
2. B. Connect the primary and secondary Cisco FMC devices with Category 6 cables of not more than 10 meters in length.
3. C. Place the active Cisco FMC device on the same trusted management network as the standby device
4. D. Restore the primary Cisco FMC backup configuration to the secondary Cisco FMC device when the primary device fails

Correct Answer: D

- (Exam Topic 2)
Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD? (Choose two.)

1. A. OSPFv2 with IPv6 capabilities
2. B. virtual links
3. C. SHA authentication to OSPF packets
4. D. area boundary router type 1 LSA filtering
5. E. MD5 authentication to OSPF packets

Correct Answer: BE
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/ospf_for_firepower_threat_defense.html

- (Exam Topic 5)
An engineer must define a URL object on Cisco FMC. What is the correct method to specify the URL without performing SSL inspection?

1. A. Use Subject Common Name value.
2. B. Specify all subdomains in the object group.
3. C. Specify the protocol in the object.
4. D. Include all URLs from CRL Distribution Points.

Correct Answer: B

- (Exam Topic 5)
A network administrator is configuring Snort inspection policies and is seeing failed deployment messages in Cisco FMC. What information should the administrator generate for Cisco TAC to help troubleshoot?

1. A. A "show tech" file for the device in question.
2. B. A "troubleshoot" file for the device in question.
3. C. A "troubleshoot" file for the Cisco FMC.
4. D. A "show tech" for the Cisco FMC.

Correct Answer: B