- (Exam Topic 5)
An engineer configures an access control rule that deploys file policy configurations to security zones or tunnel zones, and it causes the device to restart. What is the reason for the restart?

1. A. Source or destination security zones in the access control rule matches the security zones that are associated with interfaces on the target devices.
2. B. The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the destination policy.
3. C. Source or destination security zones in the source tunnel zone do not match the security zones that are associated with interfaces on the target devices.
4. D. The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the source policy.

Correct Answer: A

- (Exam Topic 5)
An engineer has been tasked with using Cisco FMC to determine if files being sent through the network are malware. Which two configuration takes must be performed to achieve this file lookup? (Choose two.)

1. A. The Cisco FMC needs to include a SSL decryption policy.
2. B. The Cisco FMC needs to connect to the Cisco AMP for Endpoints service.
3. C. The Cisco FMC needs to connect to the Cisco ThreatGrid service directly for sandboxing.
4. D. The Cisco FMC needs to connect with the FireAMP Cloud.
5. E. The Cisco FMC needs to include a file inspection policy for malware lookup.

Correct Answer: DE

- (Exam Topic 5)
A company is deploying intrusion protection on multiple Cisco FTD appliances managed by Cisco FMC. Which system-provided policy must be selected if speed and detection are priorities?

1. A. Connectivity Over Security
2. B. Security Over Connectivity
3. C. Maximum Detection
4. D. Balanced Security and Connectivity

Correct Answer: D

- (Exam Topic 4)
What is the maximum SHA level of filtering that Threat Intelligence Director supports?

1. A. SHA-1024
2. B. SHA-4096
3. C. SHA-512
4. D. SHA-256

Correct Answer: D
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/cisc

- (Exam Topic 5)
administrator is configuring SNORT inspection policies and is seeing failed deployment messages in Cisco FMC . What information should the administrator generate for Cisco TAC to help troubleshoot?

1. A. A Troubleshoot" file for the device in question.
2. B. A "show tech" file for the device in question
3. C. A "show tech" for the Cisco FMC.
4. D. A "troubleshoot" file for the Cisco FMC

Correct Answer: A