Which two statements about deleting and re-adding a device to Cisco FMC are true? (Choose two.)

• A.An option to re-apply NAT and VPN policies during registration is available, so users do not need to re- apply the policies after registration is completed.
• B.Before re-adding the device in Cisco FMC, you must add the manager back in the device.
• C.No option to delete and re-add a device is available in the Cisco FMC web interface.
• D.The Cisco FMC web interface prompts users to re-apply access control policies.
• E.No option to re-apply NAT and VPN policies during registration is available, so users need to re-apply the policies after registration is completed.

Comment: *

Name: *

Email: *

Verification: *

Upon detecting a flagrant threat on an endpoint, which two technologies instruct Cisco Identity Services Engine to contain the infected endpoint either manually or automatically? (Choose two.)

• A.Cisco Stealthwatch
• B.Cisco ASA 5500 Series
• C.Cisco AMP
• D.Cisco ASR 7200 Series
• E.Cisco FMC

Comment: *

Name: *

Email: *

Verification: *

An engineer must configure high availability for the Cisco Firepower devices. The current network topology does not allow for two devices to pass traffic concurrently. How must the devices be implemented in this environment?

• A.in active/active mode
• B.in cluster interface mode
• C.in a cluster span EtherChannel
• D.in active/passive mode

Comment: *

Name: *

Email: *

Verification: *

An engineer is investigating connectivity problems on Cisco Firepower that is using service group tags. Specific devices are not being tagged correctly, which is preventing clients from using the proper policies when going through the firewall How is this issue resolved?

• A.Use a packet capture with match criteria.
• B.Use a packet sniffer with correct filtering
• C.Use Wireshark with an IP subnet filter.
• D.Use traceroute with advanced options.

Comment: *

Name: *

Email: *

Verification: *

An engineer configures an access control rule that deploys file policy configurations to security zones, and it cause the device to restart. What is the reason for the restart?

• A.Source or destination security zones in the source tunnel zone do not match the security zones that are associated with interfaces on the target devices.
• B.The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the destination policy.
• C.The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the source policy.
• D.Source or destination security zones in the access control rule matches the security zones that are associated with interfaces on the target devices.

Comment: *

Name: *

Email: *

Verification: *