Question 1

An administrator needs to configure Cisco FMC to send a notification email when a data transfer larger than 10 MB is initiated from an internal host outside of standard business hours. Which Cisco FMC feature must be configured to accomplish this task?

Options :

A : file and malware policy

B : application detector

C : intrusion policy

D : correlation policy

Answer: A

Question 2

What is the RTC workflow when the infected endpoint is identified?

Options :

A : Cisco ISE instructs Cisco AMP to contain the infected endpoint.

B : Cisco ISE instructs Cisco FMC to contain the infected endpoint.

C : Cisco AMP instructs Cisco FMC to contain the infected endpoint.

D : Cisco FMC instructs Cisco ISE to contain the infected endpoint.

Answer: D

Question 3

A network administrator discovers that a user connected to a file server and downloaded a malware file. The Cisc FMC generated an alert for the malware event, however the user still remained connected. Which Cisco APM file rule action within the Cisco FMC must be set to resolve this issue?

Options :

A : Detect Files

B : Malware Cloud Lookup

C : Local Malware Analysis

D : Reset Connection

Answer: D

Question 4

The event dashboard within the Cisco FMC has been inundated with low priority intrusion drop events, which are overshadowing high priority events. An engineer has been tasked with reviewing the policies and reducing the low priority events. Which action should be configured to accomplish this task?

Options :

A : generate events

B : drop packet

C : drop connection

D : drop and generate

Answer: B

Question 5

Which Cisco Firepower rule action displays an HTTP warning page?

Options :

A : Monitor

B : Block

C : Interactive Block

D : Allow with Warning

Answer: C

Higher Test Marks with Free Online 300-710 Exam Practice

Buying Options: