Securing Networks with Cisco Firepower (SNCF)338 questions across 34 pages are complete and free, with no account or card.
338 questions in this bank
Free access · progress saved on this device
What is a behavior of a Cisco FMC database purge?
Answer: C
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/management_center_database_purge.pdf
Source: Adapted from community discussion — xYanivDx
An engineer currently has a Cisco FTD device registered to the Cisco FMC and is assigned the address of 10.10.50.12. The organization is upgrading the addressing schemes and there is a requirement to convert the addresses to a format that provides an adequate amount of addresses on the network. What should the engineer do to ensure that the new addressing takes effect and can be used for the Cisco FTD to Cisco FMC connection?
Answer: D
most people are talking about ipv4 to ipv6 upgrade, i don't think that "upgrading the addressing schemes" refers to change the the addressing to ipv6. but discarding wrong asnwers: A. Update the IP addresses from IPv4 to IPv6 without deleting from Cisco FMC you can't change management ip addressing while the FTD is still registered in FMC B. Format and reregister the device to Cisco FMC. I don't think that formatting managed devices would be a correct way to do nothing C. Cisco FMC does not support devices that use IPv4 IP addresses. Simply false D. Delete and reregister the device to Cisco FMC. the best way to change management ip address is to deregister an reregister, this option doesn't fit well in the question but "is the least bad option"
Source: Adapted from community discussion — japm1801
Refer to the exhibit. An engineer is analyzing the Attacks Risk Report and finds that there are over 300 instances of new operating systems being seen on the network. How is the Firepower configuration updated to protect these new operating systems?
Answer: C
Firepower Recommendations for IPS policies is a tool that work with network discovery to apply recommendations to IPS policies, but you have to apply that unless you configure your custom IPS policy to automatically take recommendations (not suggested for low end FW like 1010 because of the memory limit)
Source: Adapted from community discussion — japm1801
After using Firepower for some time and learning about how it interacts with the network, an administrator is trying to correlate malicious activity with a user. Which widget should be configured to provide this visibility on the Cisco Firepower dashboards?
Answer: B
https://www.cisco.com/c/en/us/td/docs/security/firepower/670/configuration/guide/fpmc-config-guide-v67/dashboards.html#ID-2206-00000283 The Correlation Events widget shows the average number of correlation events per second, by priority. D - right answer
Source: Adapted from community discussion — kakakayayaya
An engineer is troubleshooting application failures through an FTD deployment. While using the FMC CLI, it has been determined that the traffic in question is not matching the desired policy. What should be done to correct this?
Answer: A
Correct answer: A. Use the system support firewall-engine-debug command to determine which rules the traffic matching and modify the rule accordingly. If traffic is not matching the desired policy, the engineer should use the system support firewall-engine-debug command to determine which rules the traffic is matching and modify the rule accordingly. This command provides detailed information about traffic processing, including the rule that the traffic is matching or not matching, and can help the engineer identify issues with the policy configuration. Option B, using the system support application-identification-debug command, is not relevant to this scenario, as it is used for troubleshooting issues related to application identification. Option C, using the system support firewall-engine-dump-user-fdensity-data command, is not relevant to this scenario, as it is used for dumping firewall user data and not related to troubleshooting policy matching issues. Option D, using the system support network-options command, is not relevant to this scenario, as it is used for fine-tuning network settings and not related to troubleshooting policy matching issues.
Source: Adapted from community discussion — tanri04
Which action must be taken to permit communication between a bridge group and routed interface on Cisco Secure Firewall?
Answer: B
An engineer must reconfigure an NTP server on an IPSv device that is managed by using Cisco Secure Firewall Management Center. The engineer verified secure communications between Secure Firewall Management Center and the NTP server. How must the engineer perform the reconfiguration in Secure Firewall Management Center?
Answer: C
A network administrator is setting up a Cisco Secure Firewall Threat Defense to peer via BGP with two ISPs. The administrator wants traffic to certain IP ranges to prefer to come in one ISP instead of the other. What must be configured on the BGP connection to the peer to help facilitate the requirement?
Answer: D
Which Cisco Secure Firewall Management Center widget is authorized only for users with administrator access?
Answer: D
An engineer wants to add Cisco Secure Firewall Thread Defense to Cisco Secure Firewall Management Center with the real IP address hidden behind firewall. Engineer configured the command configure manager add Cisc0497926642 on Cisco Secure Firewall Thread Defense. After the command is added the device is not being added to Cisco Secure Firewall Management Center. Which configuration must be added in the configuration command to accomplish the task?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-710 practice, question 301. 338 questions available.
Version 1.0.0. How we source questions