SNCF — Securing Networks with Firepower — Question 90

An organization has seen a lot of traffic congestion on their links going out to the internet. There is a Cisco Firepower device that processes all of the traffic going to the internet prior to leaving the enterprise. How is the congestion alleviated so that legitimate business traffic reaches the destination?

Answer options

• A. Create a NAT policy so that the Cisco Firepower device does not have to translate as many addresses.
• B. Create a flexconfig policy to use WCCP for application aware bandwidth limiting.
• C. Create a QoS policy rate-limiting high bandwidth applications.
• D. Create a VPN policy so that direct tunnels are established to the business applications.

Correct answer: C

Explanation

The correct answer is C, as implementing a QoS policy can effectively manage and prioritize traffic, ensuring that high bandwidth applications do not monopolize the available bandwidth. Options A and B do not directly address the issue of congestion related to high bandwidth usage, while D focuses on creating tunnels rather than mitigating congestion.