350-701 practice question 20 of 35

[Security Concepts] Which policy represents a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in a deployment?

Full set: 727 questions

Domain Security Concepts

Answer options
A: Group Policy
B: Access Control Policy
C: Device Management Policy
D: Platform Service Policy Correct answer
Correct Answer:
D. Platform Service Policy
Explanation

A Platform Service Policy, often referred to as a Platform Settings Policy in Cisco Firepower Management Center (FMC), is a reusable configuration object that defines common operational and management parameters for managed devices. This policy standardizes settings such as time synchronization (NTP), logging destinations (syslog), health monitoring, and SNMP across multiple devices. By applying a single Platform Service Policy to a group of similar devices (e.g., all branch office firewalls), an administrator ensures consistent baseline configuration and simplifies management, which directly matches the description in the question.

Why Incorrect

A. Group Policy: This term is primarily associated with Microsoft Active Directory for managing user and computer settings within a Windows domain, not the specific terminology used for this function in Cisco security platforms.
B. Access Control Policy: This policy type is used to inspect network traffic and determine whether to allow or block it based on security rules, not to configure the operational parameters of the managed device itself.
C. Device Management Policy: This is a broad, generic term. While a Platform Service Policy is a form of device management, it is not the specific name for the policy that defines a shared set of operational features as described.

References

1. Cisco Firepower Management Center Configuration Guide, Version 6.4: In the chapter "Platform Settings for Firepower Threat Defense," the guide states, "A platform settings policy is a shared set of features or parameters that define the aspects of a managed device that are likely to be similar to other managed devices in a deployment." This is a direct definition matching the question. (Reference: Chapter: Platform Settings for Firepower Threat Defense, Section: About Platform Settings).

2. Cisco Firepower Management Center (FMC) Configuration Guide, Version 7.0: The guide reiterates this concept under the "Device Management" section. It describes Platform Settings policies as the mechanism to "configure basic operating system and platform-level settings for your managed devices," including NTP, SNMP, and Syslog, which are shared parameters. (Reference: Chapter: Device Management, Section: Platform Settings Policy).

Scroll to Top