Question 1

Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?
A) configure coredump packet-engine enable
B) capture-traffic
C) capture
D) capture WORD

Accepted Answer

The answer of Which command should be used on the...

Question 2

Which Cisco Firepower rule action displays an HTTP warning page?
A) Monitor
B) Block
C) Interactive Block
D) Allow with Warning

Accepted Answer

The answer of Which Cisco Firepower rule action displays an...

Question 3

A network administrator notices that SI events are not being updated. The Cisco FTD device is unable to load all of the SI event entries and traffic is not being blocked as expected. What must be done to correct this issue?
A) Restart the affected devices in order to reset the configurations.
B) Redeploy configurations to affected devices so that additional memory is allocated to the SI module.
C) Replace the affected devices with devices that provide more memory.
D) Manually update the SI event entries to that the appropriate traffic is blocked.

Accepted Answer

The answer of A network administrator notices that SI events...

Question 4

With a recent summer time change, system logs are showing activity that occurred to be an hour behind real time. Which action should be taken to resolve this issue?
A) Manually adjust the time to the correct hour on all managed devices.
B) Configure the system clock settings to use NTP with Daylight Savings checked.
C) Configure the system clock settings to use NTP.
D) Manually adjust the time to the correct hour on the Cisco FMC.

Accepted Answer

Configuring the system clock settings to use NTP with Daylight Savings checked ensures that the system automatically adjusts for time changes, including daylight saving time, keeping logs accurate.

Question 5

What is a functionality of port objects in Cisco FMC?
A) to mix transport protocols when setting both source and destination port conditions in a rule
B) to represent protocols other than TCP, UDP, and ICMP
C) to represent all protocols in the same way
D) to add any protocol other than TCP or UDP for source port conditions in access control rules.

Accepted Answer

Port objects in Cisco FMC are used to represent protocols other than TCP, UDP, and ICMP, allowing for more flexible and comprehensive rule configurations.

Question 6

How many report templates does the Cisco Firepower Management Center support?
A) 20
B) 10
C) 5
D) unlimited

Accepted Answer

Cisco Firepower Management Center supports an unlimited number of report templates, allowing users to create and customize reports as needed.

Question 7

An administrator is setting up Cisco FirePower to send data to the Cisco Stealthwatch appliances. The NetFlow_Set_Parameters object is already created, but NetFlow is not being sent to the flow collector. What must be done to prevent this from occurring?
A) Create a service identifier to enable the NetFlow service.
B) Add the NetFlow_Send_Destination object to the configuration.
C) Create a Security Intelligence object to send the data to Cisco Stealthwatch.
D) Add the NetFlow_Add_Destination object to the configuration.

Accepted Answer

The answer of An administrator is setting up Cisco FirePower...

Question 8

A connectivity issue is occurring between a client and a server which are communicating through a Cisco Firepower device. While troubleshooting, a network administrator sees that traffic is reaching the server, but the client is not getting a response. Which step must be taken to resolve this issue without initiating traffic from the client?
A) Use packet-tracer to ensure that traffic is not being blocked by an access list
B) Use packet capture to ensure that traffic is not being blocked by an access list
C) Use packet capture to validate that the packet passes through the firewall and is NATed to the corrected IP address
D) Use packet-tracer to validate that the packet passes through the firewall and is NATed to the corrected IP address

Accepted Answer

Packet-tracer can simulate the packet path through the firewall, allowing the administrator to validate that the packet is correctly processed and NATed without needing to initiate traffic from the client.

Question 9

What is the result a specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?
A) The rate-limiting rule is disabled.
B) Matching traffic is not rate limited.
C) The system rate-limits all traffic.
D) The system repeatedly generates warnings.

Accepted Answer

If a QoS rule specifies a rate limit that exceeds the maximum throughput of an interface, the rule effectively does not limit the traffic, as the interface cannot exceed its own maximum throughput.

Question 10

Which object type supports object overrides?
A) time range
B) security group tag
C) network object
D) DNS server group

Accepted Answer

Network objects support object overrides, allowing for changes to be made to the object properties without affecting the original object configuration.

Question 11

A security engineer is configuring an Access Control Policy for multiple branch locations. These locations share a common rule set and utilize a network object called INSIDE_NET which contains the locally significant internal network subnets at each location. What technique will retain the policy consistency at each location but allow only the locally significant network subnet within the applicable rules?
A) utilizing a dynamic Access Control Policy that updates from Cisco Talos
B) creating a unique Access Control Policy per device
C) utilizing policy inheritance
D) creating an Access Control Policy with an INSIDE_NET network object and object overrides

Accepted Answer

Using an INSIDE_NET network object with object overrides allows each location to maintain a consistent policy while specifying locally significant subnets for each branch.

Question 12

What are two features of bridge-group interfaces in Cisco FTD? (Choose two.)
A) The BVI IP address must be in a separate subnet from the connected network.
B) Bridge groups are supported in both transparent and routed firewall modes.
C) Bridge groups are supported only in transparent firewall mode.
D) Bidirectional Forwarding Detection echo packets are allowed through the FTD when using bridge-group members.
E) Each directly connected network must be on the same subnet.

Accepted Answer

The answer of What are two features of bridge-group interfaces...

Question 13

An engineer is building a new access control policy using Cisco FMC. The policy must inspect a unique IPS policy as well as log rule matching. Which action must be taken to meet these requirements?
A) Configure an IPS policy and enable per-rule logging
B) Disable the default IPS policy and enable global logging
C) Configure an IPS policy and enable global logging
D) Disable the default IPS policy and enable per-rule logging

Accepted Answer

To meet the requirements of inspecting a unique IPS policy and logging rule matching, the engineer must configure an IPS policy and enable per-rule logging. This allows for specific inspection and logging based on individual rules.

Question 14

An engineer is restoring a Cisco FTD configuration from a remote backup using the command restore remote-manager-backup location 1.1.1.1 admin /Volume/home/admin BACKUP_Cisc394602314.zip on a Cisco FMC. After connecting to the repository, an error occurred that prevents the FTD device from accepting the backup file. What is the problem?
A) The backup file is not in .cfg format
B) The backup file is too large for the Cisco FTD device
C) The backup file extension was changed from .tar to .zip
D) The backup file was not enabled prior to being applied

Accepted Answer

The backup file extension should be .tar, not .zip, for the Cisco FTD device to accept it.

Question 15

In which two places are thresholding settings configured? (Choose two.)
A) on each IPS rule
B) globally, within the network analysis policy
C) globally, per intrusion policy
D) on each access control rule
E) per preprocessor, within the network analysis policy

Accepted Answer

Thresholding settings can be configured on each IPS rule and globally per intrusion policy.

Question 16

A VPN user is unable to connect to web resources behind the Cisco FTD device terminating the connection. While troubleshooting, the network administrator determines that the DNS responses are not getting through the Cisco FTD. What must be done to address this issue while still utilizing Snort IPS rules?
A) Uncheck the "Drop when Inline" box in the intrusion policy to allow the traffic
B) Modify the Snort rules to allow legitimate DNS traffic to the VPN users
C) Disable the intrusion rule thresholds to optimize the Snort processing
D) Decrypt the packet after the VPN flow so the DNS queries are not inspected

Accepted Answer

The issue is likely due to Snort IPS rules blocking DNS responses. Modifying the Snort rules to allow legitimate DNS traffic will resolve the issue while still utilizing Snort IPS.

Question 17

Which CLI command is used to generate firewall debug messages on a Cisco Firepower?
A) system support firewall-engine-debug
B) system support ssl-debug
C) system support platform
D) system support dump-table

Accepted Answer

The command "system support firewall-engine-debug" is used to generate firewall debug messages on a Cisco Firepower device.

Question 18

An administrator is creating interface objects to better segment their network but is having trouble adding interfaces to the objects. What is the reason for this failure?
A) The interfaces are being used for NAT for multiple networks
B) The administrator is adding interfaces of multiple types
C) The administrator is adding an interface that is in multiple zones
D) The interfaces belong to multiple interface groups

Accepted Answer

The answer of An administrator is creating interface objects to...

Question 19

Which CLI command is used to control special handling of ClientHello messages?
A) system support ssl-client-hello-tuning
B) system support ssl-client-hello-display
C) system support ssl-client-hello-force-reset
D) system support ssl-client-hello-reset

Accepted Answer

The command "system support ssl-client-hello-tuning" is used to control special handling of ClientHello messages in a CLI environment.

Question 20

An organization is setting up two new Cisco FTD devices to replace their current firewalls and cannot have any network downtime. During the setup process, the synchronization between the two devices is failing. What action is needed to resolve this issue?
A) Confirm that both devices are running the same software version.
B) Confirm that both devices are configured with the same types of interfaces.
C) Confirm that both devices have the same flash memory sizes.
D) Confirm that both devices have the same port-channel numbering.

Accepted Answer

Both devices must be running the same software version to ensure compatibility and successful synchronization.

Exam 23: Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?

Which Cisco Firepower rule action displays an HTTP warning page?

A network administrator notices that SI events are not being updated. The Cisco FTD device is unable to load all of the SI event entries and traffic is not being blocked as expected. What must be done to correct this issue?

With a recent summer time change, system logs are showing activity that occurred to be an hour behind real time. Which action should be taken to resolve this issue?

What is a functionality of port objects in Cisco FMC?

How many report templates does the Cisco Firepower Management Center support?

An administrator is setting up Cisco FirePower to send data to the Cisco Stealthwatch appliances. The NetFlow_Set_Parameters object is already created, but NetFlow is not being sent to the flow collector. What must be done to prevent this from occurring?

What is the result a specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?

Which object type supports object overrides?

What are two features of bridge-group interfaces in Cisco FTD? (Choose two.)

An engineer is building a new access control policy using Cisco FMC. The policy must inspect a unique IPS policy as well as log rule matching. Which action must be taken to meet these requirements?

In which two places are thresholding settings configured? (Choose two.)

Which CLI command is used to generate firewall debug messages on a Cisco Firepower?

An administrator is creating interface objects to better segment their network but is having trouble adding interfaces to the objects. What is the reason for this failure?

Which CLI command is used to control special handling of ClientHello messages?

An organization is setting up two new Cisco FTD devices to replace their current firewalls and cannot have any network downtime. During the setup process, the synchronization between the two devices is failing. What action is needed to resolve this issue?