An administrator is configuring a network object in the FMC to represent a range of IP addresses from 192.168.1.100 to 192.168.1.200. Which object type should be created?
An administrator needs to configure manual NAT on an FTD device to translate both the source IP and source port of outbound packets originating from 192.168.2.50 to a specific public IP 198.51.100.10 and port 50000. Which manual NAT rule element achieves this?
An engineer needs to prioritize voice traffic (DSCP EF) over a constrained WAN interface on an FTD device. Where must the QoS policy be configured and applied?
An administrator wants to decrypt inbound HTTPS traffic destined for a public web server behind a Firepower Threat Defense device. Which type of SSL/TLS decryption policy must be configured on the FMC?
An administrator is configuring manual NAT and needs to ensure that the original source port is preserved during translation without port overloading. Which feature should be selected in the manual NAT rule?
An administrator needs to configure an identity policy to authenticate users using an external RADIUS server via Passive Authentication. Which mechanism accomplishes passive user identification?
An administrator is troubleshooting an Access Control Policy where multiple rules could potentially match a specific packet. In what order does the FMC evaluate rules within an Access Control Policy?
An administrator needs to configure Active Authentication using a captive portal on an FTD device. Which firewall feature must be properly configured and running to present the authentication prompt to users?
An administrator is configuring Identity Policies on the FMC. Which TWO identity sources are supported for user mapping and authentication? (Choose two)
An administrator wants to configure QoS on an FMC-managed FTD device. Which TWO components are required to successfully implement a QoS policy? (Choose two)
An administrator is managing object configurations on the FMC. Which TWO of the following are valid object types that can be created under Object Management? (Choose two)
An administrator is configuring Security Intelligence in FMC. Which TWO types of objects can be added to Security Intelligence blacklists or whitelists? (Choose two)
An administrator is configuring a new Access Control Policy on the FMC and needs to ensure that HTTP traffic matching a specific URL category is blocked before security inspection to optimize performance. Which policy type should be configured?
A network engineer is deploying a Firepower Threat Defense (FTD) device and must configure NAT to translate an internal server IP of 10.10.10.50 to a public IP of 203.0.113.50 while preserving the original source port for inbound traffic. Which NAT type accomplishes this?
An administrator configures an SSL Decryption Policy on the FMC to decrypt inbound HTTPS traffic destined for an internal web server. The administrator imports the private key and server certificate into the FMC. Which decryption action must be selected to allow the FTD to decrypt this traffic using the server's private key?
An organization requires that Quality of Service (QoS) be enforced on an FTD interface to limit outbound traffic for a specific guest network object to 2 Mbps. Where within the FMC interface is this QoS policy applied?
An administrator needs to create a reusable network object in the FMC representing a range of IP addresses from 192.168.1.100 to 192.168.1.200. Which object type should be created under Object Management?
An administrator needs to configure NAT on an FTD device so that internal traffic destined for a partner network uses the original source IP, but the destination IP is translated from 192.168.10.50 to 172.16.50.10. What type of NAT rule is required?
An administrator is configuring Access Control Policy rules on the FMC. The default action for unmatched traffic is currently set to Block. The requirement is changed so that unmatched traffic should pass through the FTD without inspection. Where is this setting modified?
An administrator configures QoS on an FTD interface to prioritize VoIP traffic. Which traffic matching mechanism within the QoS policy allows the FTD to identify VoIP traffic (such as SIP or RTP) based on Layer 7 application inspection?
An administrator is configuring an Identity Policy with Active Directory integration. The requirement is to ensure that users who fail primary AD authentication are assigned to a restricted guest VLAN using ISE integration. Which component in the FMC architecture handles this user-to-group association?
An administrator needs to create a custom URL object to block a specific malicious domain name 'example.malicious.com' in an Access Control Policy. Which object type should be created?
An administrator is configuring Manual NAT on an FTD device. Which THREE parameters must be defined when creating a Manual Static NAT rule for inbound traffic? (Choose three)
An administrator is creating custom Port objects in the FMC Object Management menu to be used in an Access Control Policy. The port needs to cover a range of TCP ports from 5000 to 5050. Which object type should the administrator create?
An administrator is configuring a Manual NAT rule in the FMC for an internal server that needs to be accessed from the outside zone. The internal IP is 192.168.1.50, and it must be translated to a public IP 203.0.113.10. Which TWO configuration parameters must be specified when defining this Manual NAT rule? (Choose two)
An administrator is configuring an Access Control Policy rule in FMC to secure an enterprise network. Which THREE match criteria are natively available under the Ports tab of an Access Control Rule? (Choose three)
An administrator needs to ensure that internal users can access the internet using a public IP while hiding their private address. Which NAT rule type should be configured on the FMC?
You are configuring a NAT rule on an FTD device managed by FMC. You need to translate the source IP of internal hosts to a specific public IP address when they access the internet. Which NAT type must be selected in the FMC NAT Rule editor?
You are configuring a NAT rule for a web server located in a DMZ. You want to translate the destination IP from a public address to the private DMZ address. Which NAT type is used?
An administrator is deploying a Cisco Firepower Threat Defense (FTD) device managed by Cisco Firepower Management Center (FMC) in a high-availability pair. The administrator must configure the FTD interfaces to support stateful failover. Which interface type should be configured on both FTD devices to exchange failover status and state information?
An administrator is configuring an Access Control Policy on FMC and needs to ensure that traffic from the guest network is inspected for malware while allowing web browsing. Which action should be selected in the Access Control rule to enable intrusion and malware inspection?
An administrator is configuring an FTD device through FMC and needs to ensure that management traffic to the FTD's management interface is allowed. The FTD is using a management interface with IP 10.1.1.1/24. Which configuration object must be created and applied to allow HTTPS access to the FMC?
An administrator is configuring a Site-to-Site VPN on an FTD managed by FMC. The administrator wants to ensure that only specific remote subnets are allowed to initiate VPN connections, while other subnets can only receive connections. Which configuration element should be used to enforce this restriction?
An engineer is configuring a new Cisco FTD device registered to an FMC. The organization requires that all management traffic between the FMC and the FTD be encrypted and mutually authenticated. The FMC's certificate must be validated by the FTD using a specific internal CA. Which configuration step must be performed on the FTD to meet these requirements?
An administrator is configuring a Cisco FTD device managed by FMC to perform URL filtering. The administrator wants to block access to a specific category of websites for a group of users, but allow access for a different group. Which FMC configuration element should be used to differentiate the user groups?
An administrator is setting up a new Cisco FTD device managed by FMC. The device needs to send syslog messages to an external server for compliance. Where should the administrator configure the syslog server on the FMC?
An administrator is configuring a new FTD device in a high-availability pair managed by FMC. The organization requires that the failover link be redundant and that stateful failover be enabled for all traffic. Which TWO configuration steps must be performed on the FMC to meet these requirements? (Choose two.)
An administrator is configuring a FlexConfig policy on FMC to apply custom CLI commands to an FTD device. The administrator needs to ensure that the commands are applied only when a specific condition is met, such as when a particular interface is up. Which FlexConfig feature should be used?
An administrator configures an Identity Policy on the FMC to authenticate users via Active Directory using captive portal. Where is the Identity Policy applied within the Firepower configuration hierarchy?
A network engineer needs to configure Auto NAT on a Firepower Threat Defense device managed by FMC to translate internal subnet 10.10.10.0/24 to a single public IP address 203.0.113.50. Which translation type should be selected?
An administrator wants to create a Prefilter policy to fast-path (bypass Snort inspection for) a trusted backup stream between two data centers. Which action type should be selected in the Prefilter rule?
An administrator is configuring a new Access Control Policy on the Firepower Management Center and needs to add a rule that blocks peer-to-peer file sharing applications regardless of port. Which rule type should the administrator select?
An enterprise requires FTD to decrypt outbound SSL/TLS traffic so internal users visiting external websites can be inspected by Snort for malware. Which policy and action combination must be configured?
An FMC administrator is configuring a URL Filtering policy. They want to block URLs categorized as 'Hacking' while logging the event. Where is this configured within the Access Control Policy?
An administrator configures a security intelligence feed in the FMC to block known malicious IP addresses. Where are Security Intelligence feeds and lists applied in the FMC configuration?
An FTD device is deployed in routed mode with multiple security zones. An administrator needs to configure an Access Control rule that evaluates traffic flowing between two different security zones. How are security zones utilized in the rule?
An engineer is configuring a QoS policy on an FMC-managed FTD and needs to police traffic to a maximum bandwidth limit on an interface. Which shaping/policing parameter must be configured?
An administrator configures DNS injection and rewriting in a manual NAT rule on an FTD device. What is the primary purpose of enabling DNS translation in a NAT rule?
An engineer wants to group several FTD interfaces into a single logical zone to simplify Access Control rule creation. Where are security zones created in the FMC?
An administrator is configuring a Prefilter policy to handle GRE-encapsulated traffic. Which Prefilter rule option allows handling or accelerating tunneled traffic?
An administrator wants to configure an Access Control rule that triggers an Intrusion Policy only when specific vulnerability signatures match. Where is the Intrusion Policy assigned?
An administrator needs to create a custom Application filter object in the FMC to easily select cloud storage applications in Access Control rules. Where are application filters created?
An administrator configures an SSL Decryption Policy with a rule to 'Do Not Decrypt' financial traffic. However, the administrator also wants to ensure that the encrypted session still undergoes basic certificate validation and categorization. How does FTD handle 'Do Not Decrypt' traffic?
An administrator needs to create a variable set to define specific port or network variables used within Intrusion Rules. Where are variable sets managed in the FMC?
An administrator is configuring manual NAT and needs to specify an interface pair (Source Interface and Destination Interface). Why is defining interface objects important in manual NAT rules?
An administrator is configuring manual NAT on an FTD device managed by FMC. Which TWO parameters must be defined when creating a manual NAT rule? (Choose two)
An Identity Policy is configured on the FMC to authenticate users connecting through the FTD. The administrator wants to use Active Directory as the identity source. Which mechanism must be configured to map user IP addresses to usernames without requiring explicit web authentication?
An administrator wants to group multiple existing port objects (e.g., TCP 80, TCP 443, TCP 8080) into a single object for use in Access Control Policy rules. Which object container should be created?
An administrator is configuring SSL Decryption to inspect internal clients browsing external websites. The organization wants to ensure that traffic to financial and health-related websites is bypassed to maintain privacy and regulatory compliance. How should this be configured in the SSL Policy?
An FTD device is deployed behind a service provider router that performs NAT, meaning the external IP address assigned to the FTD's outside interface changes dynamically via DHCP. How should a Manual NAT rule be configured to handle outbound traffic referencing this dynamic outside IP?
An administrator wants to ensure that specific internal subnets are never subjected to NAT translation when communicating with a partner VPN tunnel. Which NAT feature achieves this?
An administrator is troubleshooting an SSL Decryption policy where encrypted connections are failing. The FMC logs indicate that clients are rejecting the FTD's re-signed certificate because it is not trusted. What configuration step is missing?
An administrator is configuring Security Intelligence on the FMC to drop traffic from known malicious IP addresses. Where in the Access Control Policy is Security Intelligence evaluated relative to standard access rules?
An administrator needs to define network objects in the FMC Object Management menu. Which THREE object types are natively supported for network definition? (Choose three)
An administrator is configuring an Identity Policy to enforce user-based access control. Which THREE identity sources are supported by the FMC for user awareness? (Choose three)
An administrator is configuring an SSL Decryption Policy on the FMC. Which TWO conditions or actions can be configured within an SSL rule? (Choose two)
An administrator is troubleshooting a Prefilter Policy configured on an FMC. Which THREE actions are available when creating a rule in a Prefilter Policy? (Choose three)
An administrator is configuring Security Intelligence feeds on the FMC. Which TWO types of objects or feeds can be used to populate Security Intelligence blacklists? (Choose two)
An administrator is configuring interface-level QoS on an FTD device. Which THREE parameters or features can be configured within an FTD QoS policy? (Choose three)
An administrator is configuring a Network Address Translation (NAT) rule on a Cisco FMC managed Threat Defense device. The requirement is to translate the source IP address of traffic coming from the inside zone going to the outside zone, but only for a specific internal subnet. Which NAT type must the administrator select in the FMC NAT rule configuration?
A security engineer is creating an Access Control Policy (ACP) in FMC. The policy must block all traffic matching specific URL categories while allowing standard web browsing. However, the administrator wants users to receive a warning page before continuing to pages categorized as "Potentially Damaging Content" rather than a hard block. Which action should the engineer assign to the URL category in the ACP Rules tab?
An administrator is implementing an SSL Decryption Policy on a Cisco Firepower Threat Defense device managed by FMC. The policy must decrypt outbound HTTPS traffic to inspect for malware, but certain financial domains must be excluded from decryption to comply with privacy regulations. Which rule action should be configured for these specific financial domains in the SSL Decryption Policy?
An administrator needs to configure Quality of Service (QoS) on a Cisco Firepower Threat Defense device via FMC to limit peer-to-peer traffic bandwidth. Where must the QoS policy be applied for it to take effect on traffic traversing the firewall?
An engineer is configuring an Identity Policy in FMC to enforce user-based access control. Active Directory integration has been established via User Agent, but the engineer notices that some users authenticated via remote access VPN are not being resolved to their IP addresses. Which feature must be integrated into the identity configuration to capture IP-to-user mappings for remote access VPN users?
An administrator is configuring a Prefilter Policy in FMC to optimize performance on a Cisco Firepower Threat Defense device. The requirement is to completely bypass inspection for a trusted high-speed data backup tunnel between two datacenters using GRE encapsulation. Which prefilter rule action should be selected?
An administrator is setting up a new Cisco Firepower Threat Defense device and needs to configure platform-level parameters using FMC Platform Settings. Which TWO features can be configured via Platform Settings? (Choose two)
You are configuring an SSL Decryption policy. Which action is required to ensure that traffic to a specific financial website is excluded from inspection due to compliance reasons?
You are defining an Access Control Policy rule to allow traffic. If you want to log the connection at the end of the flow only if it matches the rule, which Logging setting is appropriate?
You are configuring SSL decryption. To ensure that traffic to a specific financial domain is NOT decrypted due to privacy regulations, what must you configure in the SSL Decryption Policy?
You are troubleshooting a connectivity issue. The traffic is being dropped by a Prefilter rule. What is the characteristic of traffic handled by a Prefilter policy?
An administrator is deploying a new Cisco FTD device managed by FMC and needs to route traffic between two internal networks while performing NAT. The FTD must also enforce access control and inspection policies. Which interface mode must be configured on the FTD to meet these requirements?
An administrator is deploying a new Cisco FTD device in a high-availability pair managed by FMC. The security policy requires that if the primary unit fails, the secondary unit must take over immediately without dropping existing TCP sessions. Which failover configuration must the administrator verify on the FTD devices?
An administrator is configuring a new Cisco FTD device in FMC and needs to ensure that the device can communicate with the FMC for management and policy deployment. Which interface type must be configured on the FTD to allow FMC management?
A network security engineer is configuring an FTD device managed by FMC to inspect traffic traversing a site-to-site VPN. The engineer wants to apply intrusion prevention and malware inspection to traffic destined to an internal web server. The traffic is already allowed by an access control rule. Which configuration step is required to ensure the traffic is inspected?
An administrator is troubleshooting an FTD device that is failing to register with FMC. The FTD has been configured with the correct FMC IP address, registration key, and NAT ID. Which additional setting must be verified on the FTD to allow successful registration?
An administrator is troubleshooting a Site-to-Site VPN between two FTD devices managed by FMC. The VPN tunnel is up, but traffic is not passing. The administrator suspects an issue with the crypto ACL. Which configuration element should be verified on both peers to ensure the crypto ACL matches?
An administrator is configuring an Access Control Policy on FMC and wants to log all connections that match a specific rule, including the beginning and end of each connection. Which logging action should be selected for the rule?
An administrator is configuring a NAT policy on FMC for an FTD device. The requirement is to translate the source IP address of internal users to a single public IP address when accessing the Internet, while preserving the source port. Which NAT type should be used?
An administrator is configuring a new FTD device in high availability (HA) mode using FMC. The administrator must ensure that the HA failover works correctly. Which two interface types must be configured to support HA operation? (Choose two.)
An administrator is configuring a Cisco FTD device in a high-availability pair managed by FMC. Which TWO statements about the failover link are correct? (Choose two.)
A network administrator is configuring an Access Control Policy on the FMC and needs to ensure that traffic from a specific subnet is inspected by the Snort engine for intrusion prevention. The administrator wants to achieve this with minimal performance impact on other traffic. Which action should be taken?
An administrator is configuring a Cisco FTD device managed by FMC in a high-availability pair. The administrator must ensure that failover occurs correctly. Which TWO interface configurations are required to support stateful failover? (Choose two.)
An administrator is configuring a Cisco FTD device managed by FMC to perform application control. The administrator wants to block social networking applications while allowing business applications. Which FMC configuration element should be used to identify and control these applications?