A network administrator is deploying a Cisco IPS appliance and needs it to operate initially without affecting traffic flows. It must also collect data to provide a baseline of unwanted traffic before being reconfigured to drop it. Which Cisco IPS mode meets these requirements?

• A.promiscuous
• B.failsafe
• C.bypass
• D.inline tap

Comment: *

Name: *

Email: *

Verification: *

An engineer is configuring Cisco FMC and wants to limit the time allowed for processing packets through the interface However if the time is exceeded the configuration must allow packets to bypass detection What must be configured on the Cisco FMC to accomplish this task?

• A.Inspect Local Traffic Bypass
• B.Fast-Path Rules Bypass
• C.Cisco ISE Security Group Tag
• D.Automatic Application Bypass

Comment: *

Name: *

Email: *

Verification: *

Which feature is supported by IRB on Cisco FTD devices?

• A.redundant interface
• B.dynamic routing protocol
• C.EtherChannel interface
• D.high-availability cluster

Comment: *

Name: *

Email: *

Verification: *

An engineer is troubleshooting a device that cannot connect to a web server. The connection is initiated from the Cisco FTD inside interface and attempting to reach 10.0.1.100 over the non-standard port of 9443 The host the engineer is attempting the connection from is at the IP address of 10.20.10.20. In order to determine what is happening to the packets on the network, the engineer decides to use the FTD packet capture tool Which capture configuration should be used to gather the information needed to troubleshoot this issue?
A)

B)

C)

D)

• A.Option B
• B.Option D
• C.Option C
• D.Option A

Comment: *

Name: *

Email: *

Verification: *

With Cisco Firepower Threat Defense software, which interface mode must be configured to passively receive traffic that passes through the appliance?

• A.inline tap
• B.inline set
• C.passive
• D.routed

Comment: *

Name: *

Email: *

Verification: *