350-201 Question 110
Select 3You are configuring a Cisco Firepower Threat Defense (FTD) device to secure a corporate network. The network contains sensitive data and must be protected from known threats while also being monitored for suspicious activity. Which combination of features would best meet these requirements?
- A
Access Control Policies
- B
Intrusion Prevention System (IPS)
- C
SSL Decryption
- D
Network Address Translation (NAT)
- E
Security Intelligence (SI) Blocking
Show answer and explanation
Correct answers: A, B, E
Explanation
To secure a network containing sensitive data, it is crucial to implement Access Control Policies to manage traffic, an Intrusion Prevention System (IPS) to detect and block threats, and Security Intelligence (SI) Blocking to preemptively stop traffic from known malicious sources. These features together provide robust protection and monitoring for the network.
- A. Correct.
Access Control Policies are essential for defining which traffic is allowed or denied based on configured rules. This helps in segmenting and protecting the network from unauthorized access.
- B. Correct.
An Intrusion Prevention System (IPS) is critical for identifying and preventing known and emerging threats by analyzing traffic for malicious signatures or behaviors.
- C. Incorrect.
SSL Decryption is used for inspecting encrypted traffic but is not mandatory for this scenario as it is not explicitly mentioned that encrypted traffic inspection is required.
- D. Incorrect.
Network Address Translation (NAT) is useful for hiding internal IP addresses but does not directly contribute to threat detection or prevention in this context.
- E. Correct.
Security Intelligence (SI) Blocking allows you to block traffic from known malicious IP addresses, domains, or URLs, which is vital for protecting sensitive data and mitigating threats.