- (Exam Topic 5)
An administrator must use Cisco FMC to install a backup route within the Cisco FTD to route traffic in case of a routing failure with the primary route. Which action accomplishes this task?

1. A. Install the static backup route and modify the metric to be less than the primary route.
2. B. Configure EIGRP routing on the FMC to ensure that dynamic routes are always updated.
3. C. Use a default route on the FMC instead of having multiple routes contending for priority.
4. D. Create the backup route and use route tracking on both routes to a destination IP address in the network.

Correct Answer: A

- (Exam Topic 5)
What is a characteristic of bridge groups on a Cisco FTD?

1. A. In routed firewall mode, routing between bridge groups must pass through a routed interface.
2. B. In routed firewall mode, routing between bridge groups is supported.
3. C. In transparent firewall mode, routing between bridge groups is supported
4. D. Routing between bridge groups is achieved only with a router-on-a-stick configuration on a connected router

Correct Answer: B

- (Exam Topic 3)
Which limitation applies to Cisco Firepower Management Center dashboards in a multidomain environment?

1. A. Child domains can view but not edit dashboards that originate from an ancestor domain.
2. B. Child domains have access to only a limited set of widgets from ancestor domains.
3. C. Only the administrator of the top ancestor domain can view dashboards.
4. D. Child domains cannot view dashboards that originate from an ancestor domain.

Correct Answer: D
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide- v60/Using_Dashboards.html

- (Exam Topic 1)
An organization has a Cisco FTD that uses bridge groups to pass traffic from the inside interfaces to the outside interfaces. They are unable to gather information about neighbouring Cisco devices or use multicast in their environment. What must be done to resolve this issue?

1. A. Create a firewall rule to allow CDP traffic.
2. B. Create a bridge group with the firewall interfaces.
3. C. Change the firewall mode to transparent.
4. D. Change the firewall mode to routed.

Correct Answer: C
"In routed firewall mode, broadcast and multicast traffic is blocked even if you allow it in an access rule..." "The bridge group does not pass CDP packets packets..." https://www.cisco.com/c/en/us/td/docs/security/asa/asa913/configuration/general/asa-913-general-config/intro-f
Passing Traffic Not Allowed in Routed Mode
In routed mode, some types of traffic cannot pass through the ASA even if you allow it in an access rule. The bridge group, however, can allow almost any traffic through using either an access rule (for IP traffic) or an EtherType rule (for non-IP traffic):
IP traffic—In routed firewall mode, broadcast and "multicast traffic is blocked even if you allow it in an access rule," including unsupported dynamic routing protocols and DHCP (unless you configure DHCP relay). Within a bridge group, you can allow this traffic with an access rule (using an extended ACL).
Non-IP traffic—AppleTalk, IPX, BPDUs, and MPLS, for example, can be configured to go through using an EtherType rule.
Note
"The bridge group does not pass CDP packets packets, or any packets that do not have a valid EtherType greater than or equal to 0x600. An exception is made for BPDUs and IS-IS, which are supported. "

- (Exam Topic 5)
An engineer is troubleshooting a file that is being blocked by a Cisco FTD device on the network. The user is reporting that the file is not malicious.
Which action does the engineer take to identify the file and validate whether or not it is malicious?

1. A. identify the file in the intrusion events and submit it to Threat Grid for analysis.
2. B. Use FMC file analysis to look for the file and select Analyze to determine its disposition.
3. C. Use the context explorer to find the file and download it to the local machine for investigation.
4. D. Right click the connection event and send the file to AMP for Endpoints to see if the hash is malicious.

Correct Answer: A