- (Exam Topic 5)
A network administrator has converted a Cisco FTD from using LDAP to LDAPS for VPN authentication. The Cisco FMC can connect to the LDAPS server, but the Cisco FTD is not connecting. Which configuration must be enabled on the Cisco FTD?

1. A. SSL must be set to a use TLSv1.2 or lower.
2. B. The LDAPS must be allowed through the access control policy.
3. C. DNS servers must be defined for name resolution.
4. D. The RADIUS server must be defined.

Correct Answer: B

- (Exam Topic 5)
Upon detecting a flagrant threat on an endpoint, which two technologies instruct Cisco Identity Services Engine to contain the infected endpoint either manually or automatically? (Choose two.)

1. A. Cisco ASA 5500 Series
2. B. Cisco FMC
3. C. Cisco AMP
4. D. Cisco Stealthwatch
5. E. Cisco ASR 7200 Series

Correct Answer: CD

- (Exam Topic 5)
An administrator is configuring a transparent Cisco FTD device to receive ERSPAN traffic from multiple switches on a passive port but the FTD is not processing the traffic What is the problem?

1. A. The switches do not have Layer 3 connectivity to the FTD device for GRE traffic transmission.
2. B. The FTD must be configured with an ERSPAN port, not a passive port.
3. C. The FTD must &e in routed mode to process ERSPAN traffic.
4. D. The switches were not set up with a monitor session ID (hat matches the flow ID defined on the FTD

Correct Answer: C

- (Exam Topic 5)
Network traffic coining from an organization's CEO must never be denied. Which access control policy configuration option should be used if the deployment engineer is not permitted to create a rule to allow all traffic?

1. A. Configure firewall bypass.
2. B. Change the intrusion policy from security to balance.
3. C. Configure a trust policy for the CEO.
4. D. Create a NAT policy just for the CEO.

Correct Answer: C

- (Exam Topic 5)
An administrator is attempting to remotely log into a switch in the data centre using SSH and is unable to connect. How does the administrator confirm that traffic is reaching the firewall?

1. A. by running Wireshark on the administrator's PC
2. B. by performing a packet capture on the firewall.
3. C. by running a packet tracer on the firewall.
4. D. by attempting to access it from a different workstation.

Correct Answer: B