- (Exam Topic 3)
An engineer needs to configure an access control policy rule to always send traffic for inspection without using the default action. Which action should be configured for this rule?

1. A. monitor
2. B. allow
3. C. block
4. D. trust

Correct Answer: B
https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/acce the first three access control rules in the policy—Monitor, Trust, and Block—cannot inspect matching
traffic. Monitor rules track and log but do not inspect network traffic, so the system continues to match traffic against additional rules to determine whether to permit or deny it
https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/acce

- (Exam Topic 3)
Why is it important for the organization to have an endpoint patching strategy?

1. A. so the organization can identify endpoint vulnerabilities
2. B. so the internal PSIRT organization is aware of the latest bugs
3. C. so the network administrator is notified when an existing bug is encountered
4. D. so the latest security fixes are installed on the endpoints

Correct Answer: D

- (Exam Topic 2)
What is the purpose of the My Devices Portal in a Cisco ISE environment?

1. A. to register new laptops and mobile devices
2. B. to request a newly provisioned mobile device
3. C. to provision userless and agentless systems
4. D. to manage and deploy antivirus definitions and patches on systems owned by the end user

Correct Answer: A
Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/mydevices/b_mydevices_2x.html

- (Exam Topic 1)
Which benefit is provided by ensuring that an endpoint is compliant with a posture policy configured in Cisco ISE?

1. A. It allows the endpoint to authenticate with 802.1x or MAB.
2. B. It verifies that the endpoint has the latest Microsoft security patches installed.
3. C. It adds endpoints to identity groups dynamically.
4. D. It allows CoA to be applied if the endpoint status is compliant.

Correct Answer: A

- (Exam Topic 3)
What is the purpose of CA in a PKI?

1. A. To issue and revoke digital certificates
2. B. To validate the authenticity of a digital certificate
3. C. To create the private key for a digital certificate
4. D. To certify the ownership of a public key by the named subject

Correct Answer: A
Reference: https://cheapsslsecurity.com/blog/understanding-the-role-of-certificate-authorities-in-pki/