FTD (SUSHIL)
What is FTD ?
Firewall
VPN
IPS
Router
Manager
Which two deployment model configurations are supported for Cisco FTDv in AWS?
Cisco FTDv configured in routed mode and managed by an FMCv installed in AWS
Cisco FTDv with one management interface and two traffic interfaces configured
Cisco FTDv with two management interfaces and one traffic interface configured
Cisco FTDv configured in routed mode and IPv6 configured
Traffic is not passing through IPsec site-to-site VPN on the Firepower Threat Defense appliance. What is causing this issue?
No split-tunnel policy is defined on the Firepower Threat Defense appliance
The access control policy is not allowing VPN traffic in
Site-to-site VPN peers are using same encryption algorithms
What is a benefit of using Cisco FMC over Cisco ASDM?
Cisco FMC uses Java while Cisco ASDM uses HTML5.
Cisco FMC provides centralized management while Cisco ASDM does not.
Cisco FMC supports pushing configurations to devices while Cisco ASDM does not.
Cisco FMC supports all firewall products whereas Cisco ASDM only supports Cisco ASA devices
What features does Cisco FTDv provide over ASAv?
Cisco FTDv runs on VMWare while ASAv does not
Cisco FTDv provides 1GB of firewall throughput while Cisco ASAv does not
Cisco FTDv runs on AWS while ASAv does not
Cisco FTDv supports URL filtering while ASAv does not
An organization is using Cisco Firepower and Cisco Meraki MX for network security and needs to centrally manage cloud policies across these platforms. Which software should be used to accomplish this goal?
Cisco Defense Orchestrator
Cisco Secureworks
Cisco DNA Center
Cisco Configuration Professional
An organization deploys multiple Cisco FTD appliances and wants to manage them using one centralized solution. The organization does not have a local VM but does have existing Cisco ASAs that must migrate over to Cisco FTDs. Which solution meets the needs of the organization?
Cisco FMC
CSM
Cisco FDM
CDO
Cisco FTD engineer is creating a new IKEv2 policy called s2s00123456789 for their organization to allow for additional protocols to terminate network devices with. They currently only have one policy established and need the new policy to be a backup in case some devices cannot support the stronger algorithms listed in the primary policy. What should be done in order to support this?
Change the integrity algorithms to SHA* to support all SHA algorithms in the primary policy
Make the priority for the new policy 5 and the primary policy 1
Change the encryption to AES* to support all AES algorithms in the primary policy
Make the priority for the primary policy 10 and the new policy
An engineer has been tasked with configuring a Cisco FTD to analyze protocol fields and detect anomalies in the traffic from industrial systems. What must be done to meet these requirements?
Implement pre-filter policies for the CIP preprocessor
Enable traffic analysis in the Cisco FTD
Configure intrusion rules for the DNP3 preprocessor
Modify the access control policy to trust the industrial traffic
An organization wants to use Cisco FTD or Cisco ASA devices. Specific URLs must be blocked from being accessed via the firewall which requires that the administrator input the bad URL categories that the organization wants blocked into the access policy. Which solution should be used to meet this requirement?
Cisco ASA because it enables URL filtering and blocks malicious URLs by default, whereas Cisco FTD does not
Cisco ASA because it includes URL filtering in the access control policy capabilities, whereas Cisco FTD does not
Cisco FTD because it includes URL filtering in the access control policy capabilities, whereas Cisco ASA does not
Cisco FTD because it enables URL filtering and blocks malicious URLs by default, whereas Cisco ASA does not
An organization uses Cisco FMC to centrally manage multiple Cisco FTD devices. The default management port conflicts with other communications on the network and must be changed. What must be done to ensure that all devices can communicate together?
Manually change the management port on Cisco FMC and all managed Cisco FTD devices
Set the tunnel to go through the Cisco FTD
Change the management port on Cisco FMC so that it pushes the change to all managed Cisco FTD devices
Set the tunnel port to 8305
Which information is required when adding a device to FMC?
encryption method
username & Password
Device Serial Number
Registration Key
Which FTD deployment Mode can provide separation of management on a shared appliance?
Transparent Firewall mode
Multi-context Mode
Router Mode
DMZ Multiple Zone Mode
Which Policy is used to capture host information on the cisco FTD?
Network Discovery
Correlation
Access Control
Intrusion
{"name":"FTD (SUSHIL)", "url":"https://www.quiz-maker.com/QSMG65IHE","txt":"What is FTD ?, Which two deployment model configurations are supported for Cisco FTDv in AWS?, Traffic is not passing through IPsec site-to-site VPN on the Firepower Threat Defense appliance. What is causing this issue?","img":"https://www.quiz-maker.com/3012/images/ogquiz.png"}
