Question 1

An organization does not want to use the default Cisco Firepower block page when blocking HTTP traffic. The organization wants to include information about its policies and procedures to help educate the users whenever a block occurs. Which two steps must be taken to meet these requirements? (Choose two.)

Options :

A : Modify the system-provided block page result using Python.

B : Create HTML code with the information for the policies and procedures.

C : Edit the HTTP request handling in the access control policy to customized block.

D : Write CSS code with the information for the policies and procedures.

E : Change the HTTP response in the access control policy to custom.

Answer: B,E

Question 2

What is the RTC workflow when the infected endpoint is identified?

Options :

A : Cisco ISE instructs Cisco AMP to contain the infected endpoint.

B : Cisco ISE instructs Cisco FMC to contain the infected endpoint.

C : Cisco AMP instructs Cisco FMC to contain the infected endpoint.

D : Cisco FMC instructs Cisco ISE to contain the infected endpoint.

Answer: D

Question 3

Which action should you take when Cisco Threat Response notifies you that AMP has identified a file as malware?

Options :

A : Add the malicious file to the block list.

B : Send a snapshot to Cisco for technical support.

C : Forward the result of the investigation to an external threat-analysis engine.

D : Wait for Cisco Threat Response to automatically block the malware.

Answer: A

Question 4

A network administrator must create an EtherChannel Interface on a new Cisco Firepower 9300 appliance registered with an FMC tor high availability. Where must the administrator create the EtherChannel interface?

Options :

A : FMC CLI

B : FTD CLI

C : FXOS CLI

D : FMC GUI

Answer: C

Question 5

A network administrator is reviewing a monthly advanced malware risk report and notices a host that Is listed as CnC Connected. Where must the administrator look within Cisco FMC to further determine if this host is infected with malware?

Options :

A : Analysis > Hosts > indications of Compromise

B : Analysts > Files > Malware Events

C : Analysis > Hosts > Host Attributes

D : Analysis > Flies > Network File Trajectory

Answer: A

Higher Test Marks with Free Online 300-710 Exam Practice

Buying Options: