SNCF — Securing Networks with Firepower — Question 261

An administrator is setting up a Cisco FMC and must provide expert mode access for a security engineer. The engineer is permitted to use only a secured out-of-band network workstation with a static IP address to access the Cisco FMC. What must be configured to enable this access?

Answer options

• A. Enable SSH and define an access list.
• B. Enable HTTPS and SNMP under the Access List section.
• C. Enable SCP under the Access List section.
• D. Enable HTTP and define an access list.

Correct answer: A

Explanation

The correct answer is A because enabling SSH and defining an access list allows secure remote access to the Cisco FMC, which aligns with the requirement for expert mode access. Options B and D involve using HTTP/HTTPS which are less secure than SSH, and option C is incorrect as SCP is not typically utilized for this type of access in the context provided.