nerdexam
Cisco

300-710 · Question #241

Which two tasks can the network discovery feature perform? (Choose two)

The correct answer is A. host discovery C. user discovery. The network discovery feature in Cisco Firepower performs crucial intelligence gathering tasks by identifying active hosts and users within the network. It passively analyzes traffic to build a comprehensive map of network assets and their communication patterns.

Configuration

Question

Which two tasks can the network discovery feature perform? (Choose two)

Options

  • Ahost discovery
  • BBlock traffic
  • Cuser discovery
  • Dreset connection
  • Eroute traffic

How the community answered

(37 responses)
  • A
    89% (33)
  • B
    3% (1)
  • D
    5% (2)
  • E
    3% (1)

Why each option

The network discovery feature in Cisco Firepower performs crucial intelligence gathering tasks by identifying active hosts and users within the network. It passively analyzes traffic to build a comprehensive map of network assets and their communication patterns.

Ahost discoveryCorrect

The network discovery feature identifies active hosts on the network by analyzing network traffic, building a host inventory.

BBlock traffic

Blocking traffic is an enforcement action performed by an access control policy or intrusion policy, not a discovery feature.

Cuser discoveryCorrect

Network discovery also identifies active users by correlating network activity with user login information, providing user awareness for security policies.

Dreset connection

Resetting connections is an active response mechanism for an intrusion policy or file policy, not a passive discovery function.

Eroute traffic

Routing traffic is a network layer function performed by routers, not a task of the Firepower network discovery feature.

Concept tested: Cisco Firepower network discovery

Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Network_Discovery_Policies.html

Topics

#Network Discovery#Cisco Firepower#Host Identification#User Identification

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice