Question 1

A network administrator discovers that a user connected to a file server and downloaded a malware file. The Cisco FMC generated an alert for the malware event, however the user still remained connected. Which Cisco AMP file rule action within the Cisco FMC must be set to resolve this issue?

Accepted Answer

The answer of A network administrator discovers that a user...

Question 2

Which two conditions must be met to enable high availability between two Cisco FTD devices? (Choose two.)

Accepted Answer

High availability requires the same NTP configuration to ensure time synchronization and the same number of interfaces to ensure consistent network connectivity between the devices.

Question 3

Which feature within the Cisco FMC web interface allows for detecting, analyzing, and blocking malware in network traffic?

Accepted Answer

Cisco AMP for Networks is a feature within the Cisco FMC web interface that is specifically designed to detect, analyze, and block malware in network traffic.

Question 4

An engineer is tasked with deploying an internal perimeter firewall that will support multiple DMZs. Each DMZ has a unique private IP subnet range. How is this requirement satisfied?

Accepted Answer

Deploying the firewall in routed mode with NAT configured allows for the creation of multiple DMZs with unique private IP subnet ranges. NAT translates the private IP addresses of the DMZ hosts to public IP addresses, allowing them to communicate with external networks while maintaining their private IP addresses.

Question 5

Which Cisco AMP for Endpoints policy is used only for monitoring endpoint activity?

Accepted Answer

The audit policy in Cisco AMP for Endpoints is specifically designed for monitoring endpoint activity without enforcing any blocking actions.

Question 6

An engineer is monitoring network traffic from their sales and product development departments, which are on two separate networks. What must be configured in order to maintain data privacy for both departments?

Accepted Answer

The answer of An engineer is monitoring network traffic from...

Question 7

With Cisco FTD software, which interface mode must be configured to passively receive traffic that passes through the appliance?

Accepted Answer

The passive interface mode is used to monitor traffic without actively participating in the network, allowing the appliance to receive and analyze traffic without affecting its flow.

Question 8

Refer to the exhibit. What must be done to fix access to this website while preventing the same communication to all other websites?

Accepted Answer

The answer of  Refer to the exhibit. What must...

Question 9

An engineer is configuring a Cisco FTD appliance in IPS-only mode and needs to utilize fail-to-wire interfaces. Which interface mode should be used to meet these requirements?

Accepted Answer

The inline set mode is used for fail-to-wire interfaces in IPS-only mode, allowing traffic to pass through the appliance even if it fails.

Question 10

What are the minimum requirements to deploy a managed device inline?

Accepted Answer

To deploy a managed device inline, you need inline interfaces, MTU, and mode. Security zones are not a minimum requirement for inline deployment.

Question 11

Which action should you take when Cisco Threat Response notifies you that AMP has identified a file as malware?

Accepted Answer

Adding the malicious file to the block list ensures that it is prevented from executing or spreading within the network, providing immediate protection against the identified threat.

Question 12

An organization has a compliance requirement to protect servers from clients, however, the clients and servers all reside on the same Layer 3 network. Without readdressing IP subnets for clients or servers, how is segmentation achieved?

Accepted Answer

The answer of An organization has a compliance requirement to...

Question 13

An administrator is setting up Cisco FirePower to send data to the Cisco Stealthwatch appliances. The NetFlow_Set_Parameters objet is already created, but NetFlow is not being sent to the flow collector. What must be done to prevent this from occurring?

Accepted Answer

The answer of An administrator is setting up Cisco FirePower...

Question 14

In a multi-tenant deployment where multiple domains are in use, which update should be applied outside of the Global Domain?

Accepted Answer

The answer of In a multi-tenant deployment where multiple domains...

Question 15

Which two remediation options are available when Cisco FMC is integrated with Cisco ISE? (Choose two.)

Accepted Answer

Cisco FMC integrated with Cisco ISE allows for quarantine and port shutdown as remediation options to manage network security threats.

Question 16

An engineer is configuring a second Cisco FMC as a standby device but is unable to register with the active unit. What is causing this issue?

Accepted Answer

The code versions running on the Cisco FMC devices must be the same for them to be configured in a high availability setup.

Question 17

Which connector is used to integrate Cisco ISE with Cisco FMC for Rapid Threat Containment?

Accepted Answer

pxGrid is the connector used to integrate Cisco Identity Services Engine (ISE) with Cisco Firepower Management Center (FMC) for Rapid Threat Containment.

Question 18

What is a result of enabling Cisco FTD clustering?

Accepted Answer

When Cisco FTD clustering is enabled, site-to-site VPN functionality is limited to the master unit, and if the master unit fails, all VPN connections are dropped.

Question 19

Which license type is required on Cisco ISE to integrate with Cisco FMC pxGrid?

Accepted Answer

The "plus" license is required on Cisco ISE to integrate with Cisco FMC pxGrid.

Question 20

What is a characteristic of bridge groups on a Cisco FTD?

Accepted Answer

The answer of What is a characteristic of bridge groups...

Exam 23: Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)