- (Exam Topic 5)
Which feature is supported by IRB on Cisco FTD devices?

1. A. redundant interface
2. B. dynamic routing protocol
3. C. EtherChannel interface
4. D. high-availability cluster

Correct Answer: B

- (Exam Topic 5)
An administrator receives reports that users cannot access a cloud-hosted web server. The access control policy was recently updated with several new policy additions and URL filtering. What must be done to troubleshoot the issue and restore access without sacrificing the organization's security posture?

1. A. Create a new access control policy rule to allow ports 80 and 443 to the FQDN of the web server.
2. B. Identify the blocked traffic in the Cisco FMC connection events to validate the block, and modify the policy to allow the traffic to the web server.
3. C. Verify the blocks using the packet capture tool and create a rule with the action monitor for the traffic.
4. D. Download a PCAP of the traffic attempts to verify the blocks and use the flexconfig objects to create a rule that allows only the required traffic to the destination server.

Correct Answer: B

- (Exam Topic 5)
The network administrator wants to enhance the network security posture by enabling machine learning tor malware detection due to a concern with suspicious Microsoft executable file types that were seen while creating monthly security reports for the CIO. Which feature must be enabled to accomplish this goal?

1. A. Spero
2. B. dynamic analysis
3. C. static analysis
4. D. Ethos

Correct Answer: A

- (Exam Topic 3)
When do you need the file-size command option during troubleshooting with packet capture?

1. A. when capture packets are less than 16 MB
2. B. when capture packets are restricted from the secondary memory
3. C. when capture packets exceed 10 GB
4. D. when capture packets exceed 32 MB

Correct Answer: D
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/troubleshooting_the_system.html

- (Exam Topic 1)
An administrator is optimizing the Cisco FTD rules to improve network performance, and wants to bypass inspection for certain traffic types to reduce the load on the Cisco FTD. Which policy must be configured to accomplish this goal?

1. A. prefilter
2. B. intrusion
3. C. identity
4. D. URL filtering

Correct Answer: A