Exam 300-710 topic 1 question 53 discussion

D is a common way to do at FMC. C inherited policy may work. But the question is asking "locally significant internal network subnets at each location" i.e, 10.0.1.0/24 10.0.2.0/24 10.0.3.0/24 there are three subnets (Inside_net). By using inherited policy, it can include those subnets with a rule such as https outbound allowed. So C seems ok, but because of "only the locally significant network subnet" - It makes sense D more to me

B. Reputation-based objects that represent Security Intelligence feeds and lists, application filters based on category and reputation, and file lists are reusable objects supported by Cisco FMC. C. Network-based objects that represent IP addresses and networks, port/protocol pairs, VLAN tags, security zones, and origin/destination country are also reusable objects supported by Cisco FMC. A is not a valid type of reusable object in Cisco FMC. D contains VXLAN tags, which are not mentioned as a supported type of object. E is similar to option B but specifically mentions URL categories, which is not an exhaustive list of all types of reputation-based objects supported by Cisco FMC.

The two types of objects that are reusable and supported by Cisco FMC are: B. Reputation-based objects that represent Security Intelligence feeds and lists, application filters based on category and reputation, and file lists. C. Network-based objects that represent IP addresses and networks, port/protocol pairs, VLAN tags, security zones, and origin/destination country.

I believe B & C are correct - SI feeds/lists and basic network objects are two common use cases for objects. Answer "A" is dynamic so you probably wouldn't use a reusable object, same with answer "D". In E - you can store URLs in objects but not categories, I don't think. https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/730/management-center-device-config-73/objects-object-mgmt.html#ID-2243-0000045f

Correct answer is: B and C

After all original answer is correct.

My answers are C and E.

However, exam stipulates two answers not one.......

Right answer was provided. https://www.cisco.com/c/en/us/td/docs/security/firepower/670/configuration/guide/fpmc-config-guide-v67/reusable_objects.html

Security zones and Security Intelligence are not reusable. Answer A looks odd. I see just one right answer - E.