An engineer has been tasked with using Cisco FMC to determine if files being sent through the network are malware. Which two configuration tasks must be performed to achieve this file lookup? (Choose two.)

• A.The Cisco FMC needs to include a SSL decryption policy.
• B.The Cisco FMC needs to connect to the Cisco AMP for Endpoints service.
• C.The Cisco FMC needs to connect to the Cisco ThreatGrid service directly for sandboxing.
• D.The Cisco FMC needs to connect with the FireAMP Cloud.
• E.The Cisco FMC needs to include a file inspection policy for malware lookup.

Comment: *

Name: *

Email: *

Verification: *

An administrator receives reports that users cannot access a cloud-hosted web server. The access control policy was recently updated with several new policy additions and URL filtering. What must be done to troubleshoot the issue and restore access without sacrificing the organization's security posture?

• A.Identify the blocked traffic in the Cisco FMC connection events to validate the block, and modify the policy to allow the traffic to the web server.
• B.Verify the blocks using the packet capture tool and create a rule with the action monitor for the traffic.
• C.Create a new access control policy rule to allow ports 80 and 443 to the FQDN of the web server.
• D.Download a PCAP of the traffic attempts to verify the blocks and use the flexconfig objects to create a rule that allows only the required traffic to the destination server.

Comment: *

Name: *

Email: *

Verification: *

A network administrator notices that inspection has been interrupted on all non-managed interfaces of a device. What is the cause of this?

• A.A passive interface was associated with a security zone.
• B.Multiple inline interface pairs were added to the same inline interface.
• C.The value of the highest MSS assigned to any non-management interface was changed.
• D.The value of the highest MTU assigned to any non-management interface was changed.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

What must be done to fix access to this website while preventing the same communication to all other websites?

• A.Create an access control policy rule to allow port 80 to only 172.1.1 50.
• B.Create an access control policy rule to allow port 443 to only 172.1.1 50
• C.Create an intrusion policy rule to have Snort allow port 80 to only 172.1.1 50.
• D.Create an intrusion policy rule to have Snort allow port 443 to only 172.1.1.50

Comment: *

Name: *

Email: *

Verification: *

With Cisco FTD software, which interface mode must be configured to passively receive traffic that passes through the appliance?

• A.tap
• B.firewall
• C.ERSPAN
• D.IPS-only

Comment: *

Name: *

Email: *

Verification: *