- (Exam Topic 5)
A network security engineer must export packet captures from the Cisco FMC web browser while troubleshooting an issue. When navigating to the address https:///capture/CAPI/pcap/test.pcap. an error 403: Forbidden is given instead of the PCAP file. Which action must the engineer take to resolve this issue?

1. A. Disable the HTTPS server and use HTTP instead.
2. B. Enable the HTTPS server for the device platform policy.
3. C. Disable the proxy setting on the browser.
4. D. Use the Cisco FTD IP address as the proxy server setting on the browser.

Correct Answer: B

- (Exam Topic 5)
A network administrator is configuring a Cisco AMP public cloud instance and wants to capture infections and polymorphic variants of a threat to help detect families of malware. Which detection engine meets this requirement?

1. A. RBAC
2. B. Tetra
3. C. Ethos
4. D. Spero

Correct Answer: C

- (Exam Topic 5)
An engineer is configuring two new Cisco FTD devices to replace the existing high availability firewall pair in a highly secure environment. The information exchanged between the FTD devices over the failover link must be encrypted. Which protocol supports this on the Cisco FTD?

1. A. IPsec
2. B. SSH
3. C. SSL
4. D. MACsec

Correct Answer: A

- (Exam Topic 5)
A security engineer is configuring an Access Control Policy for multiple branch locations. These locations share a common rule set and utilize a network object called INSIDE_NET which contains the locally significant internal network subnets at each location. Which technique will retain the policy consistency at each location but allow only the locally significant network subnet within the applicable rules?

1. A. utilizing a dynamic Access Control Policy that updates from Cisco Talos
2. B. utilizing policy inheritance
3. C. creating a unique Access Control Policy per device
4. D. creating an Access Control Policy with an INSIDE_NET network object and object overrides

Correct Answer: D

- (Exam Topic 5)
With Cisco FTD software, which interface mode must be configured to passively receive traffic that passes through the appliance?

1. A. ERSPAN
2. B. IPS-only
3. C. firewall
4. D. tap

Correct Answer: A