2.8 Implement Access Control Policies, AVC, URL Filtering, Malware Protection, and Intrusion Prevention Using Cisco Secure Firewall (FTD) 350-701 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In an FTD URL filtering policy, what does the 'reputation' of a URL indicate?

   • AThe speed at which the website loads
   • BThe number of links on the page
   • CThe risk level associated with the URL based on threat intelligence
   • DThe popularity of the website among users
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A network administrator needs to protect the internal network from known exploits targeting web servers. They have Cisco Secure Firewall (FTD) and want to use intrusion prevention. What is the first step they should take?

   • ACreate an access control rule that allows traffic to the web servers and attach an Intrusion Policy with the 'Balanced Security and Connectivity' base policy.
   • BDeploy a Snort rule that blocks all HTTP traffic.
   • CConfigure a URL filtering rule to block all traffic to web servers.
   • DEnable the Intrusion Policy globally on the FTD device without any access control rules.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the purpose of tuning an IPS policy on FTD?

   • ATo increase the speed of the firewall's VPN encryption
   • BTo change the firewall's routing table
   • CTo update the URL filtering database
   • DTo adjust the sensitivity and actions of intrusion rules to reduce false positives
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company wants to block all executable file downloads from the internet, but allow all other file types. They have FTD with AMP. What should they configure?

   • AUse IPS to block executable file transfers.
   • BEnable URL filtering to block sites that host executable files.
   • CCreate a file policy that blocks the 'Executable' file type and apply it to the access control rule that allows internet traffic.
   • DCreate an access control rule that denies all traffic to executable file extensions.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   When configuring an FTD access control rule to allow web traffic, which additional policies can be associated with that rule to provide layered security?

   • AVPN and routing policies
   • BSSL decryption and NAT policies
   • CIdentity and platform settings policies
   • DURL filtering, file/malware, and IPS policies
   Reveal Solution Discussion Select an answer first