Which FirePOWER services feature is associated with FireSIGHT recommendations that may be automatically applied as policy?

Question

Options

• AURL filtering
• BAMP
• CAVC
• DIPS

• A
  5% (2)
• B
  91% (40)
• C
  2% (1)
• D
  2% (1)

Explanation

Note: The answer key provided appears to contain an error. Based on Cisco's official FirePOWER/FireSIGHT documentation, the correct answer is D. IPS, not B.

FireSIGHT Recommendations are a feature of IPS (Intrusion Prevention System) policies. The FireSIGHT system analyzes your network's host profiles and vulnerability data, then recommends which intrusion rules to enable or disable - and crucially, these recommendations can be set to apply automatically to an intrusion policy.

Why the distractors are wrong:

• A (URL Filtering): URL filtering relies on category/reputation databases; it has no FireSIGHT recommendation mechanism tied to host data.
• B (AMP): Advanced Malware Protection detects and blocks malware via file analysis and threat intelligence feeds - it does not use FireSIGHT recommendations applied as policy.
• C (AVC): Application Visibility and Control identifies and controls applications but does not leverage FireSIGHT's recommendation engine.

Memory tip: Think of FireSIGHT Recommendations as the system being smart about your specific network - it knows what hosts and vulnerabilities exist, so it tailors IPS rule recommendations to your environment. "FireSIGHT sees your hosts → recommends IPS rules."

If this question appeared on a practice exam, treat the answer key as suspect and verify against Cisco's official FirePOWER documentation.

No community discussion yet for this question.