Home > Firewall & Intrusion Prevention

Firewall & Intrusion Prevention

September 4th, 2020 Go to comments

Question 1

Question 2

Question 3

Question 4

Question 5

Explanation

We can find the details of different licenses at https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Licensing_the_Firepower_System.html (Table 2). We post here a screenshot of that table:

Security_Intelligence_licenses.jpg

Question 6

Question 7

Question 8

Question 9

Explanation

You can configure your ASA FirePOWER module using one of the following deployment models:

You can configure your ASA FirePOWER module in either an inline or a monitor-only (inline tap or passive) deployment.

Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa92/asdm72/firewall/asa-firewall-asdm/modules-sfr.html

Question 10

Comments (10) Comments
  1. Chin
    October 1st, 2020

    Q9 supposed to be Routed and Transparent mode

  2. Anonymous
    October 11th, 2020
  3. Anymouse
    October 29th, 2020

    Q9 is asking about the firepower module. this is the IPS portion of the FW

  4. markluistro
    November 11th, 2020

    Should be routed and transparent mode

  5. jsaga
    November 20th, 2020

    Take a look at this one from 2019

    https://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/sfr/firepower-qsg.html

    I will stay with inline mode and passive monitor only mode (answer C and E)

  6. bobo
    November 27th, 2020

    C and E are correct – this is not a question for ASA mode(Routed and Transparent mode) but it is a question for the Firepower module on ASA

  7. tatalino
    November 28th, 2020

    correct C and E, question is asking about the IPS module and not the ASA firewall deployment

  8. zydolo
    April 14th, 2021

    Hi Guys
    Any updates for CBROPS 200-201 exam

  9. grimLord
    November 10th, 2021

    I make this mistake all the time, pay close attention and differentiate when they are referring to Firepower the firewall and when they are talking about the IPS. For this one, it’s the IPS and therefore the correct answer in inline and passive-monitor.

  10. Paddy
    May 25th, 2023

    How do you think it should be something diffrent than what is written in cisco articel?
    am I missing something? :)

Add a Comment