ネットワーク管理者は、Cisco Secure Firewall Management Center によって管理される Cisco Secure Firewall Threat Defense インスタンスを、既知の暗号化ネットワークへのトラフィックをブロックするように設定したいと考えています。この要件を満たすには、管理者は Secure Firewall Management Center でどのシステム設定を行う必要がありますか?
正解:A
To block traffic to known cryptomining networks using Cisco Secure Firewall Threat Defense (FTD) managed by Cisco Secure Firewall Management Center (FMC), the network administrator needs to configure Security Intelligence in an Access Control Policy. Security Intelligence allows administrators to block traffic based on threat intelligence feeds, which include known malicious IP addresses, domains, and URLs. Steps: Navigate toPolicies > Access Control > Access Control Policyin FMC. Edit or create an Access Control Policy. Go to theSecurity Intelligencetab. Enable the relevant threat intelligence feeds that include cryptomining networks. Apply the policy to the FTD device. This configuration ensures that traffic to known cryptomining networks is blocked, enhancing the network's security posture against cryptomining threats. References:Cisco Secure Firewall Management Center Configuration Guide, Chapter on Security Intelligence.