2.8 Implement Access Control Policies, AVC, URL Filtering, Malware Protection, and Intrusion Prevention Using Cisco Secure Firewall (FTD) 350-701 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company has a requirement to block all malware downloads, but they also have a business need to allow encrypted traffic (HTTPS) to a partner site that uses a self-signed certificate. They have FTD with AMP. What is the best way to handle this?

   • ABlock all encrypted traffic to the partner site.
   • BUse IPS to inspect the encrypted traffic without decryption.
   • CAllow the encrypted traffic without inspection, and rely on URL filtering to block malware.
   • DEnable SSL decryption for the partner site, and then apply the file policy to inspect the decrypted traffic.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company has a critical application that uses a proprietary protocol on a non-standard port. The security team wants to enable IPS, but the application generates traffic that triggers many false positives. They also want to ensure that the application is not disrupted. What is the best approach?

   • ACreate a custom IPS policy that disables the rules that cause false positives for the application's traffic, and apply it to the access control rule for that application.
   • BUse AVC to allow the application and skip IPS.
   • CBlock the application's traffic to avoid false positives.
   • DDisable IPS for the application's traffic entirely.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary purpose of Application Visibility and Control (AVC) on Cisco Secure Firewall (FTD)?

   • ATo provide a VPN tunnel for remote users
   • BTo identify and control application traffic regardless of port
   • CTo encrypt all application traffic
   • DTo block all traffic based on IP address reputation
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In a Cisco Secure Firewall (FTD) access control policy, which rule action allows traffic but does NOT inspect it for intrusions or malware?

   • ABlock
   • BTrust
   • CAllow
   • DMonitor
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the role of Advanced Malware Protection (AMP) in the FTD malware protection architecture?

   • AIt uses cloud-based threat intelligence to detect and block sophisticated malware
   • BIt encrypts files to prevent unauthorized access
   • CIt performs deep packet inspection for intrusion attempts
   • DIt provides a local database of all known malware signatures
   Reveal Solution Discussion Select an answer first