Radius CoA provides a mechanism to change the attributes of an authentication, authorization, and accounting (AAA).

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/xe-16-10/sec-usr-aaa-xe-16-10-book/sec-rad-coa.pdf

Device sensor is a feature of access devices. It allows to collect information about connected endpoints. Mostly, information collected by Device Sensor can come from the following protocols:

Cisco Discovery Protocol (CDP)

Link Layer Discovery Protocol (LLDP)

Dynamic Host Configuration Protocol (DHCP)

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200292-Configure-Device-Sensor-for-ISE-Profilin.html

The reason why, According to Cisco, if you want to migrate your ASA to FTD and want to manage them both through "CDO and FDM" then use (CDO), but if you want to migrate ASA to FTD and manage both in the same time (Centralized) then use FMC"

So the answer is absolutely A, and here is the link:

https://www.cisco.com/c/en/us/td/docs/security/firepower/migrationtool/migrationguideCDO/ASA2FTD_Using_CDO/ASA2FTD_with_FP_Migration_Tool_cdo_chapter_011.html

SNMP polling can often be in the order of 5-10 minutes, CLIs are unstructured and prone to change which can often break scripts.

The traditional use of the pull model, where the client requests data from the network does not scale when what you want is near real-time data.

Moreover, in some use cases, there is the need to be notified only when some data changes, like interfaces status, protocol neighbors change etc.

Model-Driven Telemetry is a new approach for network monitoring in which data is streamed from network devices continuously using a push model and provides near real-time access to operational statistics

https://developer.cisco.com/docs/ios-xe/#!streaming-telemetry-quick-start-guide/streaming-telemetry

C is correct answer.

We need put command ntp authentication enable.

NP3 is a SCADA Protocol which in turn is widly used in the industrial network world. "The DNP3 preprocessor detects anomalies in DNP3 traffic and decodes the DNP3 protocol for processing by the rules engine, which uses DNP3 keywords to access certain protocol fields."

https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config-guide-v63/scada_preprocessors.html

Answer should be C.

https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Security__Internet_Access__and_Communication_Ports.html

8305/tcp

Securely communicate between appliances in a deployment.

"If you change this port, you must change it for all appliances in the deployment. We recommend you keep the default."

Correct answer should be D.

The lower the number, the higher the priority.

https://docs.defenseorchestrator.com/Configuration_Guides/Objects/Configuring_the_Global_IKE_Policy/Managing_FTD_IKEv2_Policies

Priority— The relative priority of the IKE policy, from 1 to 65,535. The priority determines the order of the IKE policy compared by the two negotiating peers when attempting to find a common security association (SA). If the remote IPsec peer does not support the parameters selected in your highest priority policy, it tries to use the parameters defined in the next lowest priority. The lower the number, the higher the priority.

In ZBPF, all traffic to self zone is allowed. Self Zone is created automatically by the router while admin creates the other zones in a Zone Based Firewall. By default, IOS router starts out by allowing all traffic, even on your untrusted interfaces until other zones are created. whereas, ASA, all traffics are denies until ACL created..

https://community.cisco.com/t5/security-documents/ios-zone-based-firewall-step-by-step-basic-configuration/ta-p/3142774