A large enterprise uses Cisco FTD. They have a requirement to allow video conferencing applications (e.g., Zoom, Webex) but block file transfer within those applications to prevent data exfiltration. They also need to enforce this policy only for users in the 'Engineering' department, while allowing other departments full access. The network has a mix of domain-joined and non-domain-joined devices. Which FTD configuration best meets these requirements?

Create a prefilter rule to block all video conferencing traffic for the Engineering department.

Use URL filtering to block the file-sharing URLs of Zoom and Webex, and apply the rule to all users.

Use a captive portal to authenticate all users and then apply a URL filtering rule based on user role.

Create an access control rule that uses AVC to identify video conferencing applications and block their file transfer sub-application, and scope the rule to the Engineering AD group using an identity policy with Active Directory.

CCIE Security

Domain 5Objective 5

5.5 Web Filtering, User Identification, and Application Visibility and Control (AVC) on Cisco FTD and Cisco WSA CCIE-SECURITY Practice Questions (Page 8)

Part of the 5.0 Advanced Threat Protection and Content Security domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

20%of the exam

Questions 36–36

36expert · medium
A large enterprise uses Cisco FTD. They have a requirement to allow video conferencing applications (e.g., Zoom, Webex) but block file transfer within those applications to prevent data exfiltration. They also need to enforce this policy only for users in the 'Engineering' department, while allowing other departments full access. The network has a mix of domain-joined and non-domain-joined devices. Which FTD configuration best meets these requirements?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.

5.5 Web Filtering, User Identification, and Application Visibility and Control (AVC) on Cisco FTD and Cisco WSA CCIE-SECURITY Practice Questions (Page 8)

Questions 36–36

Keep studying — 5.0 Advanced Threat Protection and Content Security