エンジニアは、Cisco Secure Firewall Management Centre によって管理される Cisco Secure Firewall Threat Defence デバイスを設定しています。デバイスは、リモート管理のために SSH が有効になっており、内部インターフェイスからアクセスできる必要があります。これを実現するには、エンジニアはどのタイプのポリシーを設定する必要がありますか?
正解:D
To enable SSH access to a Cisco Secure Firewall Threat Defense (FTD) device from the inside interface for remote administration, the engineer needs to configure a Platform Settings policy in Cisco Secure Firewall Management Center (FMC). The Platform Settings policy allows the configuration of various system-related settings, including enabling SSH, specifying the allowed interfaces, and defining the SSH access parameters.
Steps:
* In FMC, navigate to Policies > Access Control > Platform Settings.
* Create a new Platform Settings policy or edit an existing one.
* In the policy settings, go to the SSH section.
* Enable SSH and specify the inside interface as the allowed interface for SSH access.
* Define the SSH parameters such as allowed IP addresses, user credentials, and other security settings.
* Save and deploy the policy to the FTD device.
This configuration ensures that SSH access is enabled on the specified interface, allowing secure remote administration.
References: Cisco Secure Firewall Management Center Administrator Guide, Chapter on Platform Settings.