- (Exam Topic 5)
An engineer attempts to pull the configuration for a Cisco FTD sensor to review with Cisco TAC but does not have direct access to the CU for the device. The CLl for the device is managed by Cisco FMC to which the engineer has access. Which action in Cisco FMC grants access to the CLl for the device?

1. A. Export the configuration using the Import/Export tool within Cisco FMC.
2. B. Create a backup of the configuration within the Cisco FMC.
3. C. Use the show run all command in the Cisco FTD CLI feature within Cisco FMC.
4. D. Download the configuration file within the File Download section of Cisco FMC.

Correct Answer: A

- (Exam Topic 3)
Which action should be taken after editing an object that is used inside an access control policy?

1. A. Delete the existing object in use.
2. B. Refresh the Cisco FMC GUI for the access control policy.
3. C. Redeploy the updated configuration.
4. D. Create another rule using a different object name.

Correct Answer: C
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config- guide-v63/reusable_objects.html

- (Exam Topic 1)
An engineer must configure high availability for the Cisco Firepower devices. The current network topology does not allow for two devices to pass traffic concurrently. How must the devices be implemented in this environment?

1. A. in active/active mode
2. B. in a cluster span EtherChannel
3. C. in active/passive mode
4. D. in cluster interface mode

Correct Answer: C

- (Exam Topic 5)
An engineer is investigating connectivity problems on Cisco Firepower for a specific SGT. Which command allows the engineer to capture real packets that pass through the firewall using an SGT of 64?

1. A. capture CAP type inline-tag 64 match ip any any
2. B. capture CAP match 64 type inline-tag ip any any
3. C. capture CAP headers-only type inline-tag 64 match ip any any
4. D. capture CAP buffer 64 match ip any any

Correct Answer: A

- (Exam Topic 5)
A hospital network needs to upgrade their Cisco FMC managed devices and needs to ensure that a disaster recovery process is in place. What must be done in order to minimize downtime on the network?

1. A. Configure a second circuit to an ISP for added redundancy
2. B. Keep a copy of the current configuration to use as backup
3. C. Configure the Cisco FMCs for failover
4. D. Configure the Cisco FMC managed devices for clustering.

Correct Answer: B