nerdexam
Cisco

300-710 · Question #339

A network administrator wants to configure a Cisco Secure Firewall Threat Defense instance managed by Cisco Secure Firewall Management Center to block traffic to known cryptomining networks. Which…

The correct answer is B. Access Policy, Security Intelligence. To block traffic to known cryptomining networks using Cisco Secure Firewall Threat Defense (FTD) managed by Cisco Secure Firewall Management Center (FMC), the network administrator needs to configure Security Intelligence in an Access Control Policy. Security Intelligence…

Configuration

Question

A network administrator wants to configure a Cisco Secure Firewall Threat Defense instance managed by Cisco Secure Firewall Management Center to block traffic to known cryptomining networks. Which system settings must the administrator configure in Secure Firewall Management Center to meet the requirement?

Options

  • AIntrusion Policy, Security Intelligence
  • BAccess Policy, Security Intelligence
  • CMalware Policy, Rules
  • DAccess Policy, Rules

How the community answered

(56 responses)
  • A
    9% (5)
  • B
    71% (40)
  • C
    4% (2)
  • D
    16% (9)

Explanation

To block traffic to known cryptomining networks using Cisco Secure Firewall Threat Defense (FTD) managed by Cisco Secure Firewall Management Center (FMC), the network administrator needs to configure Security Intelligence in an Access Control Policy. Security Intelligence allows administrators to block traffic based on threat intelligence feeds, which include known malicious IP addresses, domains, and URLs. Navigate to Policies > Access Control > Access Control Policy in FMC. Edit or create an Access Control Policy. Go to the Security Intelligence tab. Enable the relevant threat intelligence feeds that include cryptomining networks. Apply the policy to the FTD device. This configuration ensures that traffic to known cryptomining networks is blocked, enhancing the network's security posture against cryptomining threats.

Topics

#Firewall Management Center#Access Policy#Security Intelligence#Threat Blocking

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice