Which policy rule is included in the deployment of a local DMZ during the initial deployment of a Cisco NGFW through the Cisco FMC GUI?

• A.a default DMZ policy for which only a user can change the IP addresses.
• B.deny ip any
• C.permit ip any
• D.no policy rule is included

Comment: *

Name: *

Email: *

Verification: *

Which command is entered in the Cisco FMC CLI to generate a troubleshooting file?

• A.show running-config
• B.show tech-support chassis
• C.system support diagnostic-cli
• D.sudo sf_troubleshoot.pl

Comment: *

Name: *

Email: *

Verification: *

Within Cisco Firepower Management Center, where does a user add or modify widgets?

• A.context explorer
• B.dashboard
• C.summary tool
• D.reporting

Comment: *

Name: *

Email: *

Verification: *

Drag and drop the steps to restore an automatic device registration failure on the standby Cisco FMC from the left into the correct order on the right. Not all options are used.

Correct Answer:

Explanation

Explanation
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/firepower_management_center_high_availability.html#id_32288

Comment: *

Name: *

Email: *

Verification: *

A company is in the process of deploying intrusion prevention with Cisco FTDs managed by a Cisco FMC. An engineer must configure policies to detect potential intrusions but not block the suspicious traffic. Which action accomplishes this task?

• A.Configure IPS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by unchecking the "Drop when inline" option.
• B.Configure IDS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by checking the "Drop when inline" option.
• C.Configure IDS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by unchecking the "Drop when inline" option.
• D.Configure IPS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by checking the "Drop when inline" option.

Comment: *

Name: *

Email: *

Verification: *