300-710 · Question #241
Which two tasks can the network discovery feature perform? (Choose two)
The correct answer is A. host discovery C. user discovery. The network discovery feature in Cisco Firepower performs crucial intelligence gathering tasks by identifying active hosts and users within the network. It passively analyzes traffic to build a comprehensive map of network assets and their communication patterns.
Question
Which two tasks can the network discovery feature perform? (Choose two)
Options
- Ahost discovery
- BBlock traffic
- Cuser discovery
- Dreset connection
- Eroute traffic
How the community answered
(37 responses)- A89% (33)
- B3% (1)
- D5% (2)
- E3% (1)
Why each option
The network discovery feature in Cisco Firepower performs crucial intelligence gathering tasks by identifying active hosts and users within the network. It passively analyzes traffic to build a comprehensive map of network assets and their communication patterns.
The network discovery feature identifies active hosts on the network by analyzing network traffic, building a host inventory.
Blocking traffic is an enforcement action performed by an access control policy or intrusion policy, not a discovery feature.
Network discovery also identifies active users by correlating network activity with user login information, providing user awareness for security policies.
Resetting connections is an active response mechanism for an intrusion policy or file policy, not a passive discovery function.
Routing traffic is a network layer function performed by routers, not a task of the Firepower network discovery feature.
Concept tested: Cisco Firepower network discovery
Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Network_Discovery_Policies.html
Topics
Community Discussion
No community discussion yet for this question.