Refer to the exhibit.

Traffic is not passing through IPsec site-to-site VPN on the Firepower Threat Defense appliance. What is causing this issue?

• A.No split-tunnel policy is defined on the Firepower Threat Defense appliance.
• B.The access control policy is not allowing VPN traffic in.
• C.Site-to-site VPN peers are using different encryption algorithms.
• D.Site-to-site VPN preshared keys are mismatched.

Comment: *

Name: *

Email: *

Verification: *

Which protocol provides the strongest throughput performance when using Cisco AnyConnect VPN?

• A.BJTLSvl
• B.TLSv1.1
• C.TLSv1.2
• D.DTLSv1

Comment: *

Name: *

Email: *

Verification: *

An organization uses Cisco FMC to centrally manage multiple Cisco FTD devices The default management port conflicts with other communications on the network and must be changed What must be done to ensure that all devices can communicate together?

• A.Set the sftunnel to go through the Cisco FTD
• B.Set the sftunnel port to 8305
• C.Change the management port on Cisco FMC so that it pushes the change to all managed Cisco FTD devices
• D.Manually change the management port on Cisco FMC and all managed Cisco FTD devices

Comment: *

Name: *

Email: *

Verification: *

Which statement about the configuration of Cisco ASA NetFlow v9 Secure Event Logging is true?

• A.A sysopt command can be used to enable NSEL on a specific interface.
• B.NSEL can be used without a collector configured.
• C.A flow-export event type must be defined under a policy
• D.To view bandwidth usage for NetFlow records, the QoS feature must be enabled.

Comment: *

Name: *

Email: *

Verification: *

Drag and drop the Firepower Next Generation Intrustion Prevention System detectors from the left onto the correct definitions on the right.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *