478 questions total · 7pages · All types, answers revealed
Page 1 of 7
Page 2DNS translation rewrites IP addresses inside DNS response payloads so clients connecting through NAT reach the right address.
An administrator needs to determine if the FMC has enough disk space to hold a new software upgrade image. Which menu should they check?
The Health Monitor displays system resource utilization including disk usage.
Why this answer
The System Information page provides current disk utilization metrics for the FMC appliance.
An engineer has modified several access control rules and object groups on the FMC. Before deploying these changes to the FTD, the engineer wants to review all pending changes to ensure no unauthorized modifications are included. Where in the FMC GUI should the engineer go to view pending deployment changes?
Clicking Deploy opens the deployment dialog where administrators can select devices and review a line-by-line diff of pending changes.
Why this answer
Pending changes on the FMC are reviewed by navigating to Deploy > Deployment (or clicking the Pending Changes icon/button in the top right banner).
An administrator is configuring Manual NAT on an FTD device. Which THREE parameters must be defined when creating a Manual Static NAT rule for inbound traffic? (Choose three)
Translated source is required to specify the internal mapped IP.
Why this answer
Manual NAT rules require a Source Interface (or original source/destination criteria), Original Source, Translated Source, and appropriate interface specifications. Specifically, original destination, translated destination, and interface settings are core components.
When using the 'Search' feature in the Access Control Policy, which filter allows you to find all rules containing a specific network object?
This filter finds rules using specific network objects.
Why this answer
The rule editor allows filtering rules based on their contents like networks, zones, or applications.
An administrator is troubleshooting a syslog integration where Secure Firewall Threat Defense is sending logs to a SIEM, but the receiving SIEM cannot parse the message headers properly because the timestamp format is in local time rather than UTC. Where can the timestamp format for syslog messages be adjusted on the FMC?
Syslog formatting options, including timestamps (UTC vs local), are configured within the Platform Settings policy applied to the FTD.
Why this answer
Syslog timestamp formats (such as UTC vs local time, and inclusion of year) are configured in the FTD Platform Settings under the Syslog or Time synchronization settings.
When configuring an Access Control Policy on the FMC, what is the purpose of the Default Action set at the bottom of the rules table?
The default action acts as the catch-all rule for any traffic not matching preceding access control rules.
Why this answer
The Default Action determines how traffic that fails to match any explicit access control rule is handled (typically Block or Pass with logging).
An administrator is troubleshooting a memory leak on an FTD virtual appliance. The administrator wants to inspect real-time memory usage of individual system processes and identify top memory-consuming tasks. Which command should be run in the FTD expert mode shell?
Standard Linux utilities like 'top' and 'ps' are available in the expert shell to analyze process memory and CPU usage.
Why this answer
In standard Linux expert mode on FTD, standard process monitoring commands like 'top' or 'htop' (if installed) or specialized memory scripts are used. Specifically, 'top' or 'ps aux --sort=-%mem' displays active process memory consumption.
You are deploying a Cisco Secure Firewall Threat Defense in transparent mode. How are frames forwarded between the internal and external interfaces of the firewall?
Transparent firewalls use Layer 2 bridging, forwarding frames based on MAC addresses across bridge groups.
Why this answer
Transparent mode bridges traffic at Layer 2 using Bridge Groups and Bridge Virtual Interfaces (BVIs), forwarding frames based on destination MAC addresses rather than Layer 3 routing.
Which TWO statements are true regarding NGIPS passive mode deployment?
Since it is out-of-band, it does not impact traffic.
Why this answer
Passive mode is for monitoring only and connects to a span/tap port, thus it cannot affect traffic flow.
An engineer is deploying a Cisco Secure Firewall Threat Defense in routed mode and must configure an internal interface connected to a data center segment. The requirement is to route traffic at Layer 3 while keeping the firewall transparent to the MAC addresses of the hosts. Which action should the engineer perform on the interface setting in Cisco FMC?
A routed interface operates at Layer 3, terminating the subnet and routing traffic while updating the source and destination MAC addresses.
Why this answer
In routed mode, the firewall acts as a Layer 3 device and routes traffic using IP addresses while rewriting MAC addresses. Transparent mode operates at Layer 2. To operate at Layer 3 in routed mode while avoiding Layer 2 transparent bridge groups, standard routed interface configuration is used.
An administrator is configuring Security Intelligence feeds on the FMC. Which TWO types of objects or feeds can be used to populate Security Intelligence blacklists? (Choose two)
Administrators can upload or define custom IP lists to block.
Why this answer
Security Intelligence supports custom network/IP lists and Cisco provided dynamic feeds (like reputation feeds for URLs and IPs).
You need to map internal users to specific security policies based on their AD group membership. What must be configured in FMC to support this?
The Identity Policy defines how the system identifies users via realms.
Why this answer
Identity policies require an Identity Realm and agent integration to map user IPs to group memberships.
An administrator is troubleshooting a packet drop issue on a Firepower Threat Defense (FTD) device managed by Firepower Management Center (FMC). The administrator wants to inspect real-time packets entering and leaving specific interfaces including layer 2/3 headers and ASP drop details. Which built-in FMC feature should the administrator use?
Packet captures on FTD are configured under Devices > Device Management, editing the device, and navigating to the Packet Capture tab.
Why this answer
The Capture feature on FMC allows administrators to configure packet captures on FTD interfaces, specifying filters, matching criteria, and inspecting drop reasons via the Associated Drop inspection or Advanced Settings.
An engineer is preparing to deploy a Cisco Secure Firewall Threat Defense cluster in an enterprise data center. Which THREE requirements must be verified and configured prior to cluster initialization? (Choose three)
CCL connectivity is mandatory for cluster control synchronization.
Why this answer
Firewall clustering requirements include identical hardware models/licenses, dedicated Cluster Control Link (CCL) connections, and Port Channels connecting upstream/downstream switches to all cluster nodes.
When deploying an FTD virtual appliance on-prem using VMware ESXi, which virtual network adapter type is recommended for optimal performance?
VMXNET3 is the recommended driver for high-throughput network applications.
Why this answer
VMXNET3 is the high-performance paravirtualized network adapter recommended for all Cisco virtual appliances on VMware to reduce CPU overhead.
An engineer is configuring a Cisco Secure Firewall Threat Defense cluster in a data center. To ensure high availability and prevent split-brain scenarios, what is the specific function of the cluster control link (CCL)?
The CCL handles inter-node communication, including state synchronization, configuration sync, and health monitoring.
Why this answer
The Cluster Control Link (CCL) is dedicated to synchronization, health monitoring, and control messaging between cluster nodes, preventing split-brain conditions by maintaining quorum and state sync.
An administrator is planning the deployment of a Cisco Secure Firewall Threat Defense device and needs to choose between routed mode and transparent mode. Which factor strongly favors choosing transparent mode?
Transparent mode acts as a stealth bridge, allowing insertion without redesigning network IP schemas.
Why this answer
Transparent mode is typically chosen when inserting a firewall into an existing IP address scheme without wanting to redesign the subnetting or routing architecture.
Which THREE interface types are supported on FTD appliances?
Used for link aggregation.
Why this answer
Physical interfaces, sub-interfaces, and port channel interfaces are standard configurations on Cisco FTD.
What action should you take if you want to test a new Access Control Rule without impacting production traffic?
Monitor logs matches without enforcing drops.
Why this answer
Use the 'Monitor' action first to see what traffic matches the rule without blocking it.
An engineer is configuring an Identity Policy in FMC to enforce user-based access control. Active Directory integration has been established via User Agent, but the engineer notices that some users authenticated via remote access VPN are not being resolved to their IP addresses. Which feature must be integrated into the identity configuration to capture IP-to-user mappings for remote access VPN users?
ISE integration via pxGrid or RADIUS accounting provides user-to-IP mappings for Remote Access VPN sessions.
Why this answer
Remote Access VPN users authenticate directly to the VPN gateway. To map their dynamic IP addresses to their usernames in FMC, Cisco Adaptive Security Device Manager (ASDM) or FMC must leverage Remote Access connection profiles and ISE/RADIUS accounting or FTD local database integration. Specifically, RADIX/ISE accounting or FTD identity sources handle VPN session user mapping.
Within FMC identity policies, captive portal or TS Agent does not track remote VPN pools as effectively as configuring RADIUS/ISE or leveraging the FTD RA VPN user mapping integration.
An FTD device is configured in routed mode. What must be configured to allow traffic to exit the network through the firewall?
Static routing is required for L3 forwarding in routed mode.
Why this answer
In routed mode, the FTD acts as a router; therefore, an upstream default route or specific static routes are required to forward traffic to the next hop.
You are configuring a high availability pair of FTDs. Which interface type is strictly reserved for state synchronization?
This link is required for stateful failover synchronization.
Why this answer
The failover link (specifically the dedicated state link) is used to synchronize connection state, NAT tables, and other session data between the active and standby units.
Which tab in the Access Control Policy rule editor allows you to specify the source and destination zones?
This is the correct tab for zone selection.
Why this answer
The 'Zones' tab is where you define ingress and egress zones for the rule.
An organization configures third-party SIEM integration where Secure Firewall Threat Defense sends syslog messages over UDP. During high-traffic events, the SIEM administrator notices significant log dropping and packet loss across the network. What is the best practice solution to ensure reliable syslog delivery without packet loss due to UDP buffer overflows?
TCP provides retransmission and flow control, eliminating the packet loss issues inherent to UDP syslog in high-traffic environments.
You are deploying a Cisco Secure Firewall in transparent mode. Which requirement must be met to ensure the appliance can successfully pass traffic between two directly connected subnets?
Transparent mode requires a Bridge Group to map interfaces together at Layer 2.
Why this answer
In transparent mode, the firewall acts as a Layer 2 device. It requires a management IP address for communication but does not route traffic. It processes traffic based on L2 segments.
You need to configure link redundancy on a Cisco Secure Firewall Threat Defense pair using EtherChannel (Port Channel) across multiple physical interfaces. When configuring LACP (IEEE 802.3ad) for the port channel interface via the Firepower Management Center (FMC), which requirement must be met for successful negotiation?
LACP requires at least one end of the channel to be in active mode to initiate and successfully establish the bundle.
Why this answer
When configuring LACP on FTD, the mode must match the upstream/downstream switch configuration (Active/Active or Active/Passive) and physical parameters like speed and duplex must match identically.
An engineer is designing a high-availability architecture utilizing Equal-Cost Multi-Path (ECMP) routing with Cisco Secure Firewall Threat Defense units. Which THREE characteristics or limitations apply to ECMP on FTD? (Choose three)
ECMP load balances traffic across multiple equal-cost paths.
You are configuring an SSL Decryption policy. Which action is required to ensure that traffic to a specific financial website is excluded from inspection due to compliance reasons?
This allows the traffic to pass through the firewall without SSL inspection.
Why this answer
The 'Do Not Decrypt' action is used in the SSL policy to bypass decryption for specific traffic based on URL or category.
An administrator needs to restore an FMC configuration backup onto a replacement hardware appliance. Which of the following conditions must be met for the backup restoration to succeed successfully?
FMC backup and restore operations require exact software version matching between the source and target appliances.
Why this answer
FMC backups require the target appliance to run the exact same version of software and have matching or compatible network configurations (like license entitlements and serial structures) to ensure a clean restoration.
Which interface configuration is required to allow traffic to pass between two interfaces that belong to the same bridge group?
The BVI acts as the logical L3 entity for the bridge group.
Why this answer
Bridge group members are treated as segments of the same L2 domain, allowing traffic to pass without routing.
An administrator is troubleshooting a high availability (HA) failover link failure between two FTD physical appliances. Which THREE checks should be performed to diagnose physical and logical connectivity between the failover interfaces? (Choose three)
Physical layer verification is the first step in troubleshooting link failures.
Why this answer
Troubleshooting HA failover links involves checking physical cable connections, verifying interface status via 'show failover', checking IP reachability/ping across the failover interface, and reviewing failover configuration parameters.
When troubleshooting a connectivity issue where traffic is being dropped, which TWO of the following logs or tools should be reviewed first to determine the cause?
Shows the policy rule that acted on the traffic.
Why this answer
Connection events show the policy hit, and the packet tracer tool shows how the policy processing pipeline handles the specific traffic flow.
An administrator notices that the FMC Health Monitor shows a 'Critical' alert for the Snort process utilization on an FTD device. What is the most appropriate first-line troubleshooting step from the FMC GUI or FTD CLI to investigate the cause of high Snort CPU usage?
FMC provides Snort performance statistics under Device Management to see per-core usage, packet processing rates, and dropped packets due to overload.
Why this answer
Analyzing inspection performance metrics, packet rates, and specific traffic patterns via FMC or running 'show perf-stat' or 'top' on the FTD CLI helps identify whether specific rules or traffic spikes are causing Snort queuing.
Which component is responsible for processing traffic in an FTD cluster when 'Distributed' mode is used?
Distributed mode utilizes all nodes for processing.
Why this answer
In distributed mode, traffic is load-balanced across all members of the cluster, and each node processes its own traffic flows.
An administrator configures Cisco Secure Firewall Threat Defense to send syslog messages to a SIEM. The administrator wants to ensure that syslog messages include the unique firewall ID (device name) and structured metadata so the SIEM can distinguish logs coming from multiple firewalls in a cluster. Where is this configured?
Syslog headers can be customized in Platform Settings to include the firewall device name or identifier.
An administrator is configuring Security Intelligence in FMC. Which TWO types of objects can be added to Security Intelligence blacklists or whitelists? (Choose two)
URL objects and feeds are supported in Security Intelligence lists.
Why this answer
Security Intelligence supports IP address objects/networks and URL objects/feeds.
An administrator is troubleshooting an active/standby Cisco Secure Firewall High Availability pair. Stateful failover is enabled, but active long-lived TCP connections are dropping when a failover occurs. Upon checking the stateful inspection settings, what is the most likely cause of this behavior?
Without stateful NAT sync, NAT mappings are lost on the standby unit, causing active translated TCP streams to fail upon failover.
Why this answer
If 'Stateful Inspection' or the specific protocol inspection is disabled or not synchronized, or if the asymmetric routing path prevents state synchronization, long-lived connections will drop. Specifically, if the TCP state bypass feature or asynchronous state settings are misconfigured, state tables will not match.
When configuring an FTD cluster, what is the purpose of the Control Plane IP address?
Control Plane IPs enable centralized management of the cluster stack.
Why this answer
The Control Plane IP allows the FMC to communicate with the entire cluster as a single entity, rather than needing to manage individual nodes separately.
Which THREE methods can be used to populate IP address objects or groups in the FMC Object Management? (Choose three)
Network objects use CIDR notation.
Why this answer
IP objects can be populated using individual IP addresses, CIDR network subnets, IP ranges, or FQDNs.
When configuring a NAT rule, which THREE options are valid 'Type' selections within the NAT Rule editor?
Valid NAT type.
Why this answer
Static, Dynamic, and Identity are valid NAT types in FTD/FMC.
Where do you define the 'Search' criteria for finding objects in FMC?
Correct, this page has the search functionality.
Why this answer
The Object Management page provides a search bar for filtering existing objects.
An administrator is troubleshooting a Cisco Secure Firewall Threat Defense deployment integrated with Cisco ISE using pxGrid for TrustSec. The firewall is failing to enforce Security Group Tag (SGT) filtering on incoming traffic. What is the most likely cause of this issue?
SGT enforcement requires inline tagging to be enabled so the firewall can read the SGT header encapsulated in the packet.
Why this answer
For SGT enforcement to work properly on Secure Firewall Threat Defense, inline tagging must be enabled on the access control policy or the SGT/ISE integration must be explicitly mapped and enabled in the platform settings and access control rules, ensuring SGT metadata is preserved across security zones.
When you have multiple overlapping NAT rules, which rule is applied?
Top-down, first match wins.
Why this answer
The FTD matches NAT rules using a top-down approach, similar to Access Control rules.
A security requirement mandates that QoS be applied to limit bandwidth for guest users. Where is QoS configured on an FMC-managed FTD?
QoS policies are managed independently and applied to interfaces.
Why this answer
QoS policies are defined as a separate policy type in the FMC and then applied to the Access Control Policy.
Where in the FMC UI do you go to create a new Access Control Policy?
Correct navigation path.
Why this answer
Access Control Policies are found under the Policies menu.
An administrator is configuring third-party SIEM integration using eStreamer on the FMC. A custom client application is written to connect to the FMC eStreamer server, but the connection is immediately reset. What is the most likely cause of this issue?
eStreamer requires mutual authentication via a generated client certificate and unique password.
Why this answer
Before an eStreamer client can connect to FMC, an eStreamer certificate and password must be generated on the FMC and imported into the client application.
An engineer is troubleshooting a high availability failover issue in a Cisco Secure Firewall Threat Defense pair. Which THREE conditions will trigger an automatic failover event in an Active/Standby deployment? (Choose three)
Monitored interface failures exceeding thresholds trigger failover.
Why this answer
Failover triggers include unit power loss, critical interface failure thresholds being met, kernel/hardware crashes, or failure of health check heartbeats over the failover link.
Dynamic routing protocols like OSPF are configured globally and enabled per routed interface.
Which protocol does Cisco Secure Firewall Threat Defense use to exchange SGT (Security Group Tag) metadata across intermediate routers that do not support inline tagging?
SXP is the control plane protocol used to distribute SGT mappings to devices like FTD across non-TrustSec networks.
Why this answer
SXP (Scalable Group Tag Exchange Protocol) is a protocol used to propagate SGT-to-IP mappings across network devices and firewalls that do not support inline MACsec or IPsec SGT propagation.
When deploying an FTD in a virtual environment, what is the primary role of the 'GigabitEthernet0/0' interface by default?
The first interface is often management.
Why this answer
In most virtual FTD deployments, the first interface is typically reserved for the management or diagnostic connectivity.
What must be configured before an Access Control Rule can use a URL category?
Required for dynamic URL category updates.
Why this answer
The URL filtering license must be enabled/configured for the category database to be available.
Which component is mandatory for managing multiple FTD devices in a distributed enterprise deployment?
FMC provides the centralized policy management required for multiple devices.
Why this answer
Firepower Management Center (FMC) is the centralized management platform required to manage and orchestrate policies across multiple FTD appliances.
An administrator is configuring high availability for Cisco Secure Firewall Threat Defense using Cisco FMC. Which TWO configuration steps are required during the initial setup of an Active/Standby HA pair? (Choose two)
A dedicated failover link is required for health monitoring and state sync.
Why this answer
Active/Standby HA setup requires assigning roles (Primary/Secondary), configuring the failover link interface parameters, and matching interface configurations.
An administrator is configuring inline interface pairs on a Cisco Secure Firewall Threat Defense device. Which THREE characteristics apply to inline deployment mode? (Choose three)
Inline inspection requires seeing both forward and return paths for stateful analysis.
Why this answer
Inline mode inspects traffic live, can drop packets based on policy or threats, and supports hardware bypass (fail-open) capabilities.
An administrator wants to view system status and resource metrics directly on an FTD CLI without logging into the FMC. Which TWO commands are commonly used in the FTD diagnostic CLI or expert shell for this purpose? (Choose two)
The Linux 'top' command displays real-time process resource consumption.
Why this answer
On FTD, 'show resource usage' or 'show memory' in the diagnostic CLI and 'top' in the expert shell provide resource metrics.
What is the effect of changing the order of rules in an Access Control Policy?
Correct, order defines priority.
Why this answer
Rules are evaluated top-down; changing the order can cause a rule to be shadowed or never matched.
You are deploying an FTD unit in transparent mode. Which requirement must be met for the management interface and data interfaces during the initial configuration?
Bridge groups are required for L2 switching, and management IP is essential for control.
Why this answer
In transparent mode, the FTD acts as a Layer 2 firewall. The management interface must be configured to provide access to the device, but the data interfaces do not require IP addresses for traffic processing, although they must be bridged.
What is the result of applying an 'IPS Policy' to an Access Control Rule?
IPS policy adds the inspection layer.
Why this answer
The IPS policy enables deep packet inspection for the traffic matched by the rule.
An administrator needs to configure an identity policy to authenticate users using an external RADIUS server via Passive Authentication. Which mechanism accomplishes passive user identification?
Passive authentication relies on identity services like ISE pxGrid or Active Directory event logs via User Agent.
Why this answer
Passive authentication maps users without prompting them for credentials, typically achieved using Cisco Firepower User Agent or ISE pxGrid integration.
Which TWO of the following are valid methods for deploying an FTD appliance?
FTDv is fully supported on VMware.
Why this answer
FTD can be deployed on dedicated hardware appliances or as a virtual machine in various hypervisors or cloud platforms.
TLS encryption secures syslog data against eavesdropping across untrusted networks.
An administrator is preparing to upgrade an FTD managed device using the FMC. Before initiating the upgrade, which FMC utility should be run to check for compatibility, disk space, and potential configuration blocks?
The Check Compatibility / Readiness check utility within System > Updates verifies disk space, model support, and prerequisite versions before an upgrade.
Why this answer
The System Diagnostics or the Upgrade Verification Tool / Software Upgrade readiness check built into FMC is designed to validate compatibility and prerequisites before performing upgrades.
An administrator is troubleshooting an issue where an FMC cannot communicate with a managed FTD device. The health monitor shows registration is down. The administrator checks the FTD CLI and verifies the registration key and NAT ID. Which log file on the FTD should the administrator examine to troubleshoot registration and communication daemon errors (such as sftunnel)?
The sftunnel log file tracks secure tunnel establishment, certificate handshakes, and heartbeat messages between FTD and FMC.
Why this answer
The sftunnel daemon manages secure communication between FTD and FMC. Its logs are located in /var/log/cisco/sftunnel.log on the FTD filesystem.
What must be done to apply a change made in the Access Control Policy?
Deploy pushes the config to the sensor.
Why this answer
You must click 'Deploy' in the FMC to push the changes to the FTD.
An engineer is configuring a QoS policy on an FMC-managed FTD and needs to police traffic to a maximum bandwidth limit on an interface. Which shaping/policing parameter must be configured?
Traffic policing uses CIR and burst parameters to strictly limit bandwidth consumption.
Why this answer
Interface-based QoS rate limiting uses police parameters to cap bandwidth for traffic matching the QoS policy.
An administrator is troubleshooting an eStreamer connection between the FMC and a custom Python SIEM script. The connection is established, but no intrusion events appear in the SIEM. Which TWO potential reasons could explain why intrusion events are missing from the stream? (Choose two)
If intrusion inspection is set to 'None' or 'Access Control with no IPS', no intrusion events are generated for eStreamer to stream.
Why this answer
Missing intrusion events in eStreamer can result from the client script not subscribing to intrusion event types during initialization or from Access Control rules not having intrusion policies enabled.
An engineer needs to troubleshoot connectivity through an FTD firewall and wants to use the FTD packet tracer utility. Which THREE parameters are required when executing a basic packet tracer command from the diagnostic CLI? (Choose three)
Protocol specification is mandatory for packet-tracer.
You are integrating Cisco Secure Firewall Management Center (FMC) with Cisco Identity Services Engine (ISE) via pxGrid. After successfully establishing the pxGrid connection, user identity data is not populating on the FMC. Where in the FMC GUI should you verify that the SGTs and user-to-IP mappings are being received?
Analysis > Users > Active Sessions displays the current user-to-IP mappings and identity data learned from ISE via pxGrid.
Why this answer
User-to-IP mappings and Security Group Tags (SGTs) received via pxGrid can be verified under Analysis > Users > User Activity or by checking the Connection Status within the ISE configuration pane under System > Integration > ISE.
An enterprise network architect is designing high availability for Cisco Secure Firewall Threat Defense using static route tracking and IP SLA. Which THREE components are essential for implementing robust static route tracking? (Choose three)
IP SLA / BFD probes test the reachability of the gateway.
Why this answer
Static route tracking requires an IP SLA probe (or BFD), a tracking object that evaluates the probe status, and a static route tied to that tracking object.
An administrator is troubleshooting connectivity issues to the FMC web interface (HTTPS). Which TWO commands or diagnostic checks can be performed on the FMC CLI to verify web server responsiveness and port status? (Choose two)
Restarting or checking the web server process daemon verifies web interface operational status.
Why this answer
On the FMC CLI, administrators can check the status of web services using netstat/ss to verify port 443 binding, and examine lighttpd or nginx web server processes.
An FMC managed deployment is experiencing slow GUI performance and delayed event reporting. The administrator suspects database table bloat in the FMC PostgreSQL database. Which utility or command can the administrator run from the FMC expert shell to analyze and vacuum/optimize the database safely?
FMC includes internal database maintenance utilities managed via support scripts to safely vacuum PostgreSQL tables.
Why this answer
FMC provides specialized database maintenance scripts, such as 'sfdblist' or database optimization tools located in /usr/local/sf/bin/ or invoked via specific admin CLI utilities.
What is the result of using a 'Security Group' object in an Access Control rule?
SGTs (Security Group Tags) are the basis for this object type.
Why this answer
Security Group objects allow policy matching based on Cisco TrustSec tags.
In an FTD clustering deployment, how does the control plane communicate state information between the master and slave units?
The Control Link synchronizes cluster state and health information.
Why this answer
In FTD clustering, the Control Link (CL) is responsible for heartbeat and state synchronization between the master unit and the subordinate units.
What is the primary function of the 'Object Management' section in FMC?
This is the central location for objects.
Why this answer
Object Management is where you create reusable objects for policies.
Page 1 of 7
Page 2Practice 300-710 SNCF by domain
Target a specific domain to shore up weak areas.
See all domains with question counts →