Refer to the exhibit.

Which statement about the authentication protocol used in the configuration is true

• A.The authentication request contains only a password
• B.The authentication and authorization requests are grouped in a single packet
• C.There are separate authentication and authorization request packets
• D.The authentication request contains only a username

Comment: *

Name: *

Email: *

Verification: *

Which feature is configured for managed devices in the device platform settings of the Firepower Management Center?

• A.intrusion policy
• B.network address translations
• C.quality of service
• D.time synchronization

Comment: *

Name: *

Email: *

Verification: *

Drag and drop the Firepower Next Generation Intrustion Prevention System detectors from the left onto the correct definitions on the right.

Correct Answer:

Explanation

Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-configguide-v64/detecti

Comment: *

Name: *

Email: *

Verification: *

Drag and drop the capabilities of Cisco Firepower versus Cisco AMP from the left into the appropriate category on the right.

Correct Answer:

Explanation The Firepower System uses network discovery and identity policies to collect host, application, and user data for traffic on your network. You can use certain types of discovery and identity data to build a comprehensive map of your network assets, perform forensic analysis, behavioral profiling, access control, and mitigate and respond to the vulnerabilities and exploits to which your organization is susceptible. The Cisco Advanced Malware Protection (AMP) solution enables you to detect and block malware, continuously analyze for malware, and get retrospective alerts. AMP for Networks delivers network-based advanced malware protection that goes beyond point-in-time detection to protect your organization across the entire attack continuum - before, during, and after an attack. Designed for Cisco Firepower network threat appliances, AMP for Networks detects, blocks, tracks, and contains malware threats across multiple threat vectors within a single system. It also provides the visibility and control necessary to protect your organization against highly sophisticated, targeted, zero-day, and persistent advanced malware threats.

Comment: *

Name: *

Email: *

Verification: *

A network administrator is configuring a switch to use Cisco ISE for 802.1X. An endpoint is failing authentication and is unable to access the network. Where should the administrator begin troubleshooting to verify the authentication details?

• A.Adaptive Network Control Policy List
• B.Context Visibility
• C.Accounting Reports
• D.RADIUS Live Logs

Correct Answer: D

How To Troubleshoot ISE Failed Authentications & Authorizations
Check the ISE Live Logs
Login to the primary ISE Policy Administration Node (PAN).
Go to Operations > RADIUS > Live Logs
(Optional) If the event is not present in the RADIUS Live Logs, go to Operations > Reports > Reports > Endpoints and Users > RADIUS Authentications Check for Any Failed Authentication Attempts in the Log

Comment: *

Name: *

Email: *

Verification: *