300-710 SNCF: Securing Networks with Cisco Firewalls

By Cisco · Question Mode

QuestionQ27

Configuration

Question Image

Refer to the exhibit. An engineer is reviewing the Attacks Risk Report and identifies more than 300 instances of new operating systems appearing on the network. How does the Firepower configuration get updated to protect these newly detected operating systems?

Explanation

Cisco Firepower's discovery and vulnerability-mapping engine analyzes newly observed hosts, operating systems, and network changes and generates Firepower Recommended Rules, suggested intrusion-policy rule-state changes tailored to the newly discovered assets. These recommendations are surfaced to the administrator for review and application; Firepower does not automatically rewrite the running access control or intrusion policy on its own.

Community Discussion

No comments yet. Be the first to start the discussion!