358 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.
This is exactly what you see during practice — question, options, and a full explanation after you answer.
An administrator configures an Identity Policy on the FMC to authenticate users via Active Directory using captive portal. Where is the Identity Policy applied within the Firepower configuration hierarchy?
In FMC, Identity Policies are not standalone objects; they are referenced inside an Access Control Policy. The Access Control Policy contains the identity policy selection, and the identity policy defines the captive portal, AD realm, and authentication rules. This is why the cor…Read full explanation
A network engineer needs to configure Auto NAT on a Firepower Threat Defense device managed by FMC to translate internal subnet 10.10.10.0/24 to a single public IP address 203.0.113.50. Which translation type should be selected?
Dynamic PAT (Port Address Translation) is the correct choice because it translates multiple internal IP addresses to a single public IP address using unique source ports. This allows the entire 10.10.10.0/24 subnet to share one public IP, which is the typical use case for PAT. St…Read full explanation
An administrator wants to create a Prefilter policy to fast-path (bypass Snort inspection for) a trusted backup stream between two data centers. Which action type should be selected in the Prefilter rule?
In a Prefilter policy, the FastPath action bypasses Snort inspection for trusted traffic, allowing it to be forwarded without deep packet inspection. This is ideal for a trusted backup stream between data centers because it reduces latency and processing overhead. The FastPath ac…Read full explanation
Questions are tagged by exam domain. Practice a specific domain or mix them all.
Answer at your own pace. Explanation and domain tag shown immediately after each answer.
Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.
Full explanations on every question
Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.
Domain score breakdown
After each session see your score by exam domain so you know exactly where to focus study time.
100% free, forever
No subscription, no trial, no email wall. Start a session in under 10 seconds.
Exam-style questions
Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.