Network traffic coining from an organization's CEO must never be denied. Which access control policy configuration option should be used if the deployment engineer is not permitted to create a rule to allow all traffic?

• A.Create a NAT policy just for the CEO.
• B.Change the intrusion policy from security to balance.
• C.Configure firewall bypass.
• D.Configure a trust policy for the CEO.

Comment: *

Name: *

Email: *

Verification: *

A network administrator reviews the file report for the last month and notices that all file types, except exe. show a disposition of unknown. What is the cause of this issue?

• A.A file policy has not been applied to the access policy.
• B.The malware license has not been applied to the Cisco FTD.
• C.Only Spero file analysis is enabled.
• D.The Cisco FMC cannot reach the Internet to analyze files.

Comment: *

Name: *

Email: *

Verification: *

An organization is migrating their Cisco ASA devices running in multicontext mode to Cisco FTD devices. Which action must be taken to ensure that each context on the Cisco ASA is logically separated in the Cisco FTD devices?

• A.Configure the Cisco FTD to use port channels spanning multiple networks.
• B.Configure a container instance in the Cisco FTD for each context in the Cisco ASA.
• C.Add the Cisco FTD device to the Cisco ASA port channels.
• D.Add a native instance to distribute traffic to each Cisco FTD context.

Comment: *

Name: *

Email: *

Verification: *

With Cisco FTD integrated routing and bridging, which interface does the bridge group use to communicate with a routed interface?

• A.subinterface
• B.bridge group member
• C.switch virtual
• D.bridge virtual

Comment: *

Name: *

Email: *

Verification: *

In a multi-tennent deployment where multiple domains are in use. which update should be applied outside of the Global Domain?

• A.Cisco Geolocation Database
• B.minor upgrade
• C.local import of major upgrade
• D.local import of intrusion rules

Comment: *

Name: *

Email: *

Verification: *