- (Exam Topic 5)
Drag and drop the configuration steps from the left into the sequence on the right to enable external authentication on Cisco FMC to a RADIUS server.

Solution:
4, 1, 2, 3

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 5)
A security engineer is configuring an Access Control Policy for multiple branch locations These locations share a common rule set and utilize a network object called INSIDE_NET which contains the locally significant internal network subnets at each location What technique will retain the policy consistency at each location but allow only the locally significant network subnet within the applicable rules?

1. A. utilizing policy inheritance
2. B. utilizing a dynamic ACP that updates from Cisco Talos
3. C. creating a unique ACP per device
4. D. creating an ACP with an INSIDE_NET network object and object overrides

Correct Answer: D

- (Exam Topic 5)
Remote users who connect via Cisco AnyConnect to the corporate network behind a Cisco FTD device report that they get no audio when calling between remote users using their softphones. These same users can call internal users on the corporate network without any issues. What is the cause of this issue?

1. A. The hairpinning feature is not available on FTD.
2. B. Split tunneling is enabled for the Remote Access VPN on FTD
3. C. FTD has no NAT policy that allows outside to outside communication
4. D. The Enable Spoke to Spoke Connectivity through Hub option is not selected on FTD.

Correct Answer: A

- (Exam Topic 5)
The administrator notices that there is malware present with an .exe extension and needs to verify if any of the systems on the network are running the executable file. What must be configured within Cisco AMP for Endpoints to show this data?

1. A. prevalence
2. B. threat root cause
3. C. vulnerable software
4. D. file analysis

Correct Answer: A

- (Exam Topic 5)
An engineer is setting up a remote access VPN on a Cisco FTD device and wants to define which traffic gets sent over the VPN tunnel. Which named object type in Cisco FMC must be used to accomplish this task?

1. A. split tunnel
2. B. crypto map
3. C. access list
4. D. route map

Correct Answer: A