How does Active Directory integration on Cisco FTD identify users for policy enforcement?

By reading MAC addresses from switches

By mapping user logon events to IP addresses

What is the primary purpose of Application Visibility and Control (AVC) on Cisco FTD?

To provide load balancing for applications

To identify and control applications regardless of port

To block all peer-to-peer traffic

In Cisco FTD, how are application-based rules typically created?

By configuring application-specific NAT rules

By writing CLI commands for each application

By selecting applications or application filters in an access control policy

By creating separate VLANs for each application

What is the role of malware protection in Cisco WSA web filtering?

To block downloads of malicious files and scripts

CCIE Security

Domain 5Objective 5

5.5 Web Filtering, User Identification, and Application Visibility and Control (AVC) on Cisco FTD and Cisco WSA CCIE-SECURITY Practice Questions (Page 3)

Part of the 5.0 Advanced Threat Protection and Content Security domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

20%of the exam

Questions 11–15

11foundation · easy
How does Active Directory integration on Cisco FTD identify users for policy enforcement?
Select an answer first
12foundation · easy
What is the primary purpose of Application Visibility and Control (AVC) on Cisco FTD?
Select an answer first
13foundation · easy
In Cisco FTD, how are application-based rules typically created?
Select an answer first
14foundation · easy
Which feature on Cisco WSA is used to enforce acceptable use policies by blocking access to specific URL categories?
Select an answer first
15foundation · easy
What is the role of malware protection in Cisco WSA web filtering?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.