QUESTION: 113 Exam Topic: 5, NEW Questions

An organization wants to secure traffic from their branch office to the headquarter building using Cisco Firepower devices, They want to ensure that their Cisco Firepower devices are not wasting resources on inspecting the VPN traffic.
What must be done to meet these requirements?

Configure the Cisco Firepower devices to ignore the VPN traffic using prefilter policies
Enable a flexconfig policy to re-classify VPN traffic so that it no longer appears as interesting traffic
Configure the Cisco Firepower devices to bypass the access control policies for VPN traffic.
Tune the intrusion policies in order to allow the VPN traffic through without inspection

Answer(s): B

Reveal Solution Next Question

QUESTION: 114 Exam Topic: 5, NEW Questions

An organization has implemented Cisco Firepower without IPS capabilities and now wants to enable inspection for their traffic. They need to be able to detect protocol anomalies and utilize the Snort rule sets to detect malicious behaviour. How is this accomplished?

Modify the access control policy to redirect interesting traffic to the engine
Modify the network discovery policy to detect new hosts to inspect
Modify the network analysis policy to process the packets for inspection
Modify the intrusion policy to determine the minimum severity of an event to inspect.

Answer(s): D

Reveal Solution Next Question

QUESTION: 115 Exam Topic: 5, NEW Questions

Refer to the exhibit.

An organization has an access control rule with the intention of sending all social media traffic for inspection After using the rule for some time, the administrator notices that the traffic is not being inspected, but is being automatically allowed.
What must be done to address this issue?