- (Exam Topic 5)
An engineer is working on a LAN switch and has noticed that its network connection to the mime Cisco IPS has gone down Upon troubleshooting it is determined that the switch is working as expected What must have been implemented for this failure to occur?

1. A. The upstream router has a misconfigured routing protocol
2. B. Link-state propagation is enabled
3. C. The Cisco IPS has been configured to be in fail-open mode
4. D. The Cisco IPS is configured in detection mode

Correct Answer: D

- (Exam Topic 5)
A Cisco FTD device is running in transparent firewall mode with a VTEP bridge group member ingress interface. What must be considered by an engineer tasked with specifying a destination MAC address for a packet trace?

1. A. Only the UDP packet type is supported.
2. B. The output format option for the packet logs is unavailable.
3. C. The destination MAC address is optional if a VLAN ID value is entered.
4. D. The VLAN ID and destination MAC address are optional.

Correct Answer: C

- (Exam Topic 5)
An organization must be able to ingest NetFlow traffic from their Cisco FTD device to Cisco Stealthwatch for behavioral analysis. What must be configured on the Cisco FTD to meet this requirement?

1. A. flexconfig object for NetFlow
2. B. interface object to export NetFlow
3. C. security intelligence object for NetFlow
4. D. variable set object for NetFlow

Correct Answer: A