What is the maximum bit size that Cisco FMC supports for HTTPS certificates?

• A.4096
• B.1024
• C.2048
• D.8192

Comment: *

Name: *

Email: *

Verification: *

On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?

• A.transparent inline mode
• B.TAP mode
• C.strict TCP enforcement
• D.propagate link state

Comment: *

Name: *

Email: *

Verification: *

A network engineer is extending a user segment through an FTD device for traffic inspection without creating another IP subnet How is this accomplished on an FTD device in routed mode?

• A.by leveraging the ARP to direct traffic through the firewall
• B.by assigning an inline set interface
• C.by using a BVI and create a BVI IP address in the same subnet as the user segment
• D.by bypassing protocol inspection by leveraging pre-filter rules

Comment: *

Name: *

Email: *

Verification: *

An engineer must investigate a connectivity issue and decides to use the packet capture feature on Cisco FTD. The goal is to see the real packet going through the Cisco FTD device and see the Snort detection actions as a part of the output. After the capture-traffic command is issued, only the packets are displayed. Which action resolves this issue?

• A.Use the verbose option as a part of the capture-traffic command
• B.Specify the trace using the -T option after the capture-traffic command.
• C.Use the capture command and specify the trace option to get the required information.
• D.Perform the trace within the Cisco FMC GUI instead of the Cisco FTD CLI.

Comment: *

Name: *

Email: *

Verification: *

An engineer is configuring a Cisco IPS to protect the network and wants to test a policy before deploying it. A copy of each incoming packet needs to be monitored while traffic flow remains constant. Which IPS mode should be implemented to meet these requirements?

• A.transparent
• B.Inline tap
• C.routed
• D.passive

Comment: *

Name: *

Email: *

Verification: *