A network administrator is trying to configure a previously created file policy on a new access policy. Which action must the administrator take before applying the file policy?
Answer(s): A
In Cisco Firepower, file policies are used to inspect and control files within the network traffic based on specific rules. To apply a file policy to traffic effectively, it must be associated with an access control rule within an access policy.File policies cannot be applied independently; they must be integrated into access control rules. These rules specify how traffic should be treated, allowing the administrator to control file-based actions, such as allowing, blocking, or tracking files within network traffic.Once the access control rule is created, the administrator can specify conditions, such as the file type and file disposition (clean, malware, unknown, etc.), and attach the file policy to control these files accordingly.
A security engineer must add a new policy to block UDP traffic to one server. The engineer adds a new object. Which action must the engineer take next to identify all the UDP ports?
In Cisco Secure Firewall, when configuring policies to block specific types of traffic, the engineer can specify the transport protocol (such as UDP) without defining specific ports if the goal is to block all UDP traffic.By setting the transport protocol to UDP and leaving the port field empty, the policy applies to all UDP ports.This approach allows the security engineer to block all UDP traffic to the specified server without needing to list each individual UDP port.
Refer to the exhibit. An engineer is configuring access control rules on a Cisco Secure Firewall Threat Defense device. The access control rules must include a file policy with rules that will trigger when MSEXE files are accessed. Which two actions must be configured in the access rule? (Choose two.)
Answer(s): A,C
The first row in the exhibit shows an action for MSEXE files set to "Block Files with Reset". This action will block the MSEXE files and send a TCP reset to terminate the connection, effectively preventing the files from being accessed or downloaded.The second row shows an action for MSEXE files set to "Detect Files". This is essentially a monitoring action that allows the system to log and detect MSEXE file access events without blocking them.In this configuration, combining "Block Files with Reset" and "Detect Files" enables both blocking specific actions and monitoring file access, providing comprehensive control and visibility for MSEXE files.
An engineer must deny ICMP traffic to the networks of separate departments that use Cisco Secure Firewall Management Center. The engineer must use the same object on the relevant device for each network. What must be configured in Secure Firewall Management Center?
In Cisco Secure Firewall Management Center (FMC), if an engineer needs to apply the same object across multiple devices or networks but may want to configure specific settings for each device or network, they can use the "Allow Overrides" option. When the Allow Overrides checkbox is selected, it enables flexibility by allowing the object to have different configurations or values on different devices while still being centrally managed. This is useful when a single object is applied across multiple networks, as it lets the engineer tailor the settings for each department while maintaining consistency in object management.
Refer to the exhibit. An engineer is deploying a new instance of Cisco Secure Firewall Threat Defense. Which action must the engineer take next so that Client_A and Client_B receive an IP address via DHCP from Server_A?
Answer(s): D
In a transparent mode deployment, Cisco Secure Firewall Threat Defense (FTD) does not block traffic by default but may require explicit access rules for certain protocols, such as DHCP. DHCP requests and responses must be allowed through the firewall for the clients (Client_A and Client_B) to receive an IP address from the DHCP server (Server_A). By creating access rules that permit DHCP traffic in the Cisco Secure Firewall Management Center, the engineer enables the necessary communication for DHCP to function correctly between clients and the DHCP server.
Post your Comments and Discuss Cisco 300-710 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 300-710 content, but please register or login to continue.