2.8 Implement Access Control Policies, AVC, URL Filtering, Malware Protection, and Intrusion Prevention Using Cisco Secure Firewall (FTD) 350-701 Practice Questions (Page 4)

Questions 16–18

1. 16application · medium

   A company is concerned about malware being downloaded from the internet. They want to block known malicious files and also detect unknown malware using sandboxing. They have Cisco Secure Firewall (FTD) with FMC and a subscription for Advanced Malware Protection (AMP). What should they configure?

   • AEnable File Policy with AMP, set action to 'Detect Files' and 'Block Malware', and configure the file policy to send files to the AMP cloud for analysis.
   • BCreate an access control rule that denies all HTTP and HTTPS traffic.
   • CEnable IPS with a rule that blocks all file transfers.
   • DConfigure URL filtering to block the 'Malware' category.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which FTD feature is responsible for inspecting files transferred over supported protocols and blocking those that match known malware signatures?

   • AAccess Control Policy
   • BSecurity Intelligence
   • CFile Policy
   • DURL Filtering
   Reveal Solution Discussion Select an answer first
3. 18expert · hard

   A company has a high volume of legitimate encrypted traffic to a partner network. They want to enable IPS but are concerned about performance impact and false positives. What is the best approach?

   • AEnable SSL decryption for the partner network traffic and apply a custom IPS policy tuned for that traffic.
   • BUse AVC to allow the partner network traffic and skip IPS.
   • CEnable IPS without SSL decryption, relying on the encrypted traffic's metadata.
   • DDisable IPS for the partner network traffic to avoid performance impact.
   Reveal Solution Discussion Select an answer first