2.8 Implement Access Control Policies, AVC, URL Filtering, Malware Protection, and Intrusion Prevention Using Cisco Secure Firewall (FTD) 350-701 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company has a mixed environment: employees need access to a SaaS application (Salesforce) and also need to browse the web. The security team wants to block malware downloads, prevent access to known phishing sites, and detect any intrusion attempts. They have FTD with FMC. They also want to minimize false positives for legitimate business traffic. Which configuration approach best meets these requirements?

   • ACreate separate access control rules: one to allow Salesforce with AVC, one to allow web browsing with URL filtering and malware protection, and one for the rest with IPS enabled.
   • BCreate a single access control rule that allows all traffic, and enable all security features (AVC, URL filtering, malware protection, IPS) with default settings.
   • CUse a single access control rule that denies all traffic, and then create exceptions for Salesforce and web browsing.
   • DConfigure all security features in the default access control policy without any specific rules.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which feature on Cisco Secure Firewall (FTD) allows you to block web traffic based on the category of the requested URL, such as 'social networking'?

   • AURL Filtering
   • BSecurity Intelligence
   • CIntrusion Prevention System (IPS)
   • DMalware Protection
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which FTD feature uses Snort-based rules to detect and prevent network intrusions?

   • AIntrusion Prevention System (IPS)
   • BSecurity Intelligence
   • CMalware Protection
   • DURL Filtering
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An organization wants to block access to known malicious websites and also prevent users from visiting sites in the 'Social Networking' category during work hours. They use Cisco Secure Firewall (FTD) with FMC. What is the most efficient way to implement this?

   • ACreate a URL filtering rule that blocks the 'Malware' and 'Social Networking' categories, and apply it to the relevant access control policy.
   • BCreate an access control rule that denies traffic to all IP addresses known to host malicious content and social media.
   • CEnable IPS with a rule that blocks traffic to social networking sites.
   • DConfigure a DNS sinkhole to redirect all social media and malicious domains to a blackhole.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In FTD, which policy type is used to combine access control, AVC, URL filtering, malware protection, and IPS into a single cohesive security policy?

   • ASSL Decryption Policy
   • BPlatform Settings Policy
   • CIdentity Policy
   • DAccess Control Policy
   Reveal Solution Discussion Select an answer first