Which two statements about bridge-group interfaces in Cisco FTD are true? (Choose two.)

• A.The BVI IP address must be in a separate subnet from the connected network.
• B.Bridge groups are supported in both transparent and routed firewall modes.
• C.Bridge groups are supported only in transparent firewall mode.
• D.Bidirectional Forwarding Detection echo packets are allowed through the FTD when using bridge-group members.
• E.Each directly connected network must be on the same subnet.

Comment: *

Name: *

Email: *

Verification: *

Which two routing options are valid with Cisco FTD? (Choose Two)

• A.BGPv6
• B.ECMP with up to three equal cost paths across multiple interfaces
• C.ECMP with up to three equal cost paths across a single interface
• D.BGPv4 in transparent firewall mode
• E.BGPv4 with nonstop forwarding

Comment: *

Name: *

Email: *

Verification: *

An organization is using a Cisco FTD and Cisco ISE to perform identity-based access controls. A network administrator is analyzing the Cisco FTD events and notices that unknown user traffic is being allowed through the firewall. How should this be addressed to block the traffic while allowing legitimate user traffic?

• A.Modify the Cisco ISE authorization policy to deny this access to the user.
• B.Modify Cisco ISE to send only legitimate usernames to the Cisco FTD.
• C.Add the unknown user in the Access Control Policy in Cisco FTD.
• D.Add the unknown user in the Malware & File Policy in Cisco FTD.

Comment: *

Name: *

Email: *

Verification: *

Which two statements about bridge-group interfaces in Cisco FTD are true? (Choose two.)

• A.The BVI IP address must be in a separate subnet from the connected network.
• B.Bridge groups are supported in both transparent and routed firewall modes.
• C.Bridge groups are supported only in transparent firewall mode.
• D.Bidirectional Forwarding Detection echo packets are allowed through the FTD when using bridge-group members.
• E.Each directly connected network must be on the same subnet.

Comment: *

Name: *

Email: *

Verification: *

Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?

• A.configure coredump packet-engine enable
• B.capture-traffic
• C.capture
• D.capture WORD

Comment: *

Name: *

Email: *

Verification: *