300-710 Dumps Questions - Effective Way to Get Certified

300-710 Dumps Questions – Effective Way to Get Certified

Category:

Comments:

0 Comments

Post Date:

March 12, 2023

If you're in the field of Cisco, you know how important it is to stay up-to-date with the latest knowledge and skills to protect your organization's networks and data. One way to do that is by obtaining CCNP Security, specifically the 300-710 exam. While preparing for the 300-710 exam, you might consider using 300-710 dumps to help you familiarize yourself with the exam format and content. These 300-710 exam dumps questions can be an effective way to gauge your knowledge and identify areas where you may need additional study. Study online free 300-710 exam dumps below.

Page 1 of 12

1. A mid-sized company is experiencing higher network bandwidth utilization due to a recent acquisition The network operations team is asked to scale up their one Cisco FTD appliance deployment to higher capacities due to the increased network bandwidth.

Which design option should be used to accomplish this goal?

Deploy multiple Cisco FTD appliances in firewall clustering mode to increase performance.

Deploy multiple Cisco FTD appliances using VPN load-balancing to scale performance.

Deploy multiple Cisco FTD HA pairs to increase performance

Deploy multiple Cisco FTD HA pairs in clustering mode to increase performance

2. An administrator is working on a migration from Cisco ASA to the Cisco FTD appliance and needs to test the rules without disrupting the traffic.

Which policy type should be used to configure the ASA rules during this phase of the migration?

identity

Intrusion

Access Control

Prefilter

3. A security analyst must create a new report within Cisco FMC to show an overview of the daily attacks, vulnerabilities, and connections. The analyst wants to reuse specific dashboards from other reports to create this consolidated one.

Which action accomplishes this task?

Create a new dashboard object via Object Management to represent the desired views.

Modify the Custom Workflows within the Cisco FMC to feed the desired data into the new report.

Copy the Malware Report and modify the sections to pull components from other reports.

Use the import feature in the newly created report to select which dashboards to add.

4. An administrator must fix a network problem whereby traffic from the inside network to a webserver is not getting through an instance of Cisco Secure Firewall Threat Defense.

Which command must the administrator use to capture packets to the webserver that are dropped by Secure Firewall Throat Defense and resold the issue?

capture CAP int OUTSIDE match ip any host WEBSERVERIP

capture CAP type asp-drop all headers-only

capture CAP int INSIDE match ip any host WEBSERVERIP

capture CAP int INSIDE match tcp any 80 host WEBSERVERlP 80

5. An engineer is configuring a Cisco IPS to protect the network and wants to test a policy before deploying it. A copy of each incoming packet needs to be monitored while traffic flow remains constant.

Which IPS mode should be implemented to meet these requirements?

Inline tap

passive

transparent

routed

6. A network administrator is troubleshooting access to a website hosted behind a Cisco FTD device External clients cannot access the web server via HTTPS The IP address configured on the web server is 192 168 7.46 The administrator is running the command capture CAP interface outside match ip any 192.168.7.46 255.255.255.255 but cannot see any traffic in the capture.

Why is this occurring?

The capture must use the public IP address of the web server.

The FTD has no route to the web server.

The access policy is blocking the traffic.

The packet capture shows only blocked traffic

7. An engineer is troubleshooting the upgrade of a Cisco Secure Firewall Threat Defense device on the Secure Firewall Management Center 7.0 GUI. The engineer wants to collect the upgrade data and logs.

Which two actions must the engineer take? (Choose two.)

View the system and troubleshooting details.

Select the Secure Firewall Threat Defense device properties.

Select the Secure Firewall Management Center device.

Access the Health Events page.

Access the Health Monitor page.

8. How does enabling Cisco FTD clustering impact site-to-site VPN functionality?

It restricts site-to-site VPN to the master unit only.

It allows full VPN redundancy across all cluster members.

It distributes VPN connections evenly across all cluster units.

It limits VPN configuration changes to the master unit.

9. A network administrator is implementing an active/passive high availability Cisco FTD pair.

When adding the high availability pair, the administrator cannot select the secondary peer.

What is the cause?

The second Cisco FTD is not the same model as the primary Cisco FT

An high availability license must be added to the Cisco FMC before adding the high availability pair.

The failover link must be defined on each Cisco FTD before adding the high availability pair.

Both Cisco FTD devices are not at the same software Version

10. Which process should be checked when troubleshooting registration issues between Cisco FMC and managed devices to verify that secure communication is occurring?

fpcollect

dhclient

sfmgr

sftunnel

Page 2 of 12

11. Which limitation applies to Cisco Firepower Management Center dashboards in a multidomain environment?

Child domains can view but not edit dashboards that originate from an ancestor domain.

Child domains have access to only a limited set of widgets from ancestor domains.

Only the administrator of the top ancestor domain can view dashboards.

Child domains cannot view dashboards that originate from an ancestor domain.

12. An engineer is setting up a remote access VPN on a Cisco FTD device and wants to define which traffic gets sent over the VPN tunnel.

Which named object type in Cisco FMC must be used to accomplish this task?

split tunnel

crypto map

access list

route map

13. An organization has implemented Cisco Firepower without IPS capabilities and now wants to enable inspection for their traffic. They need to be able to detect protocol anomalies and utilize the Snort rule sets to detect malicious behaviour.

How is this accomplished?

Modify the access control policy to redirect interesting traffic to the engine

Modify the network discovery policy to detect new hosts to inspect

Modify the network analysis policy to process the packets for inspection

Modify the intrusion policy to determine the minimum severity of an event to inspect.

14. What is the maximum SHA level of filtering that Threat Intelligence Director supports?

SHA-1024

SHA-4096

SHA-512

SHA-256

15. An administrator is adding a new URL-based category feed to the Cisco FMC for use within the policies. The intelligence source does not use STIX. but instead uses a .txt file format.

Which action ensures that regular updates are provided?

Add a URL source and select the flat file type within Cisco FM

Upload the .txt file and configure automatic updates using the embedded UR

Add a TAXII feed source and input the URL for the feed.

Convert the .txt file to STIX and upload it to the Cisco FM

16. An engineer must configure high availability for the Cisco Firepower devices. The current network topology does not allow for two devices to pass traffic concurrently.

How must the devices be implemented in this environment?

in active/active mode

in a cluster span EtherChannel

in active/passive mode

in cluster interface mode

17. Which object type supports object overrides?

time range

security group tag

network object

DNS server group

18. An engineer is configuring URL filtering for a Cisco FTD device in Cisco FMC. Users must receive a warning when they access http:/'www.Dac'additstte.corn with the option of continuing to the website if they choose to. No other websites should be blacked.

Which two actions must the engineer lake to meet these requirements? (Choose two.)

On the HTTP Responses tab of the access control policy editor, set the Block Response Page to Custom.

On the HTTP Responses tab of the access control policy editor, sot the Interactive Block Response Page to system-provided.

Configure the default action for the access control policy to Interactive Block.

Configure an access control rule that matches the Adult URL category and se: the action to interactive Block.

Configure an access control rule that matches an URL object for http://www.badaduitslte.com; and set the action to interactive Block.

19. An organization wants to secure traffic from their branch office to the headquarter building using Cisco Firepower devices, They want to ensure that their Cisco Firepower devices are not wasting resources on inspecting the VPN traffic.

What must be done to meet these requirements?

Configure the Cisco Firepower devices to ignore the VPN traffic using prefilter policies

Enable a flexconfig policy to re-classify VPN traffic so that it no longer appears as interesting traffic

Configure the Cisco Firepower devices to bypass the access control policies for VPN traffic.

Tune the intrusion policies in order to allow the VPN traffic through without inspection

20. Within Cisco Firepower Management Center, where does a user add or modify widgets?

dashboard

reporting

context explorer

summary tool

Page 3 of 12

21. An engineer is troubleshooting application failures through a FTD deployment. While using the FMC CLI. it has been determined that the traffic in question is not matching the desired policy.

What should be done to correct this?

Use the system support firewall-engine-debug command to determine which rules the traffic matching and modify the rule accordingly

Use the system support application-identification-debug command to determine which rules the traffic matching and modify the rule accordingly

Use the system support firewall-engine-dump-user-f density-data command to change the policy and allow the application through the firewall.

Use the system support network-options command to fine tune the policy.

22. How many report templates does the Cisco Firepower Management Center support?

unlimited

23. An engineer is troubleshooting connectivity to the DNS servers from hosts behind a new Cisco FTD device. The hosts cannot send DNS queries to servers in the DMZ.

Which action should the engineer take to troubleshoot this issue using the real DNS packets?

Use the Connection Events dashboard to check the block reason and adjust the inspection policy as needed.

Use the packet capture tool to check where the traffic is being blocked and adjust the access control or intrusion policy as needed.

Use the packet tracer tool to determine at which hop the packet is being dropped.

Use the show blocks command in the Threat Defense CLI tool and create a policy to allow the blocked traffic.

24. Which action must be taken on the Cisco FMC when a packet bypass is configured in case the Snort engine is down or a packet takes too long to process?

Enable Inspect Local Router Traffic

Enable Automatic Application Bypass

Configure Fastpath rules to bypass inspection

Add a Bypass Threshold policy for failures

25. A security engineer is adding three Cisco FTD devices to a Cisco FMC. Two of the devices have successfully registered to the Cisco FMC. The device that is unable to register is located behind a router that translates all outbound traffic to the router's WAN IP address.

Which two steps are required for this device to register to the Cisco FMC? (Choose two.)

Reconfigure the Cisco FMC lo use the device's private IP address instead of the WAN address.

Configure a NAT ID on both the Cisco FMC and the device.

Add the port number being used for PAT on the router to the device's IP address in the Cisco FM

Reconfigure the Cisco FMC to use the device's hostname instead of IP address.

Remove the IP address defined for the device in the Cisco FM

26. Network users are experiencing Intermittent issues with internet access. An engineer ident med mat the issue Is being caused by NAT exhaustion.

How must the engineer change the dynamic NAT configuration to provide internet access for more users without running out of resources?

Define an additional static NAT for the network object in use.

Configure fallthrough to interface PAT on 'he Advanced tab.

Convert the dynamic auto NAT rule to dynamic manual NA

Add an identity NAT rule to handle the overflow of users.

27. A network administrator reviews the file report for the last month and notices that all file types, except exe. show a disposition of unknown.

What is the cause of this issue?

The malware license has not been applied to the Cisco FT

The Cisco FMC cannot reach the Internet to analyze files.

A file policy has not been applied to the access policy.

Only Spero file analysis is enabled.

28. A network engineer is configuring URL Filtering on Firepower Threat Defense.

Which two port requirements on the Firepower Management Center must be validated to allow communication with the cloud service? (Choose two.)

outbound port TCP/443

inbound port TCP/80

outbound port TCP/8080

inbound port TCP/443

outbound port TCP/80

29. An engineer must permit SSH on the inside interface of a Cisco Secure Firewall Threat Defense device. SSH is currently permitted only on the management interface.

Which type of policy must the engineer configure?

platform policy

access control policy

NAT policy

intrusion policy

30. A network engineer is logged into the Cisco AMP for Endpoints console and sees a malicious verdict for an identified SHA-256 hash.

Which configuration is needed to mitigate this threat?

Add the hash to the simple custom deletion list.

Use regular expressions to block the malicious file.

Enable a personal firewall in the infected endpoint.

Add the hash from the infected endpoint to the network block list.

Page 4 of 12

31. Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD? (Choose two.)

OSPFv2 with IPv6 capabilities

virtual links

SHA authentication to OSPF packets

area boundary router type 1 LSA filtering

MD5 authentication to OSPF packets

32. An engineer must configure a correlation policy in Cisco Secure Firewall Management Center to detect when an IP address from an internal network communicates with a known malicious host. Connections made by the internal IP addresses must be tracked, and an external dynamic list must be used for the condition.

Which type of event must the engineer configure on the correlation policy?

Intrusion Impact Alert

Connection tracker

Network discovery

Malware

33. An engineer must integrate a thud-party security Intelligence teed with Cisco Secure Firewall Management Center. Secure Firewall Management Center is running Version 6.2 3 and has 8 GB of memory.

Which two actions must be taken to implement Throat Intelligence Director? (Choose two.)

Upgrade to version 6.6.

Enable REST API access.

Add the URL of the TAXII server.

Add 7 GB of memory.

Add a TAXII server

34. An engineer is setting up a new Cisco Secure Firewall Threat Defense appliance to replace the current firewall. The company requests that inline sets be used and that when one interface in an inline set goes down, the second interface in the inline set goes down.

What must the engineer configure to meet the deployment requirements?

strict TCP enforcement

propagate link state

Snort fail open

inline tap mode

35. A Cisco FMC administrator wants to configure fast pathing of trusted network traffic to increase performance.

In which type of policy would the administrator configure this feature?

Identity policy

Prefilter policy

Network Analysis policy

Intrusion policy

36. Which two dynamic routing protocols are supported in Firepower Threat Defense without using FlexConfig? (Choose two.)

EIGRP

OSPF

static routing

IS-IS

BGP

37. A network administrator is configuring a transparent Cisco Secure Firewall Threat Defense registered to a Cisco Secure Firewall Management Center. The administrator wants to configure the Secure Firewall Threat Defense to allow ARP traffic to pass between two interfaces of a bridge group.

What must be configured?

Use the default configuration on the devices.

An access policy must allow MAC address FFF

FFF

ARP inspection must be disabled.

An access policy must allow MAC address 0100.0CC

CCC

38. What is the result of specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?

The rate-limiting rule is disabled.

Matching traffic is not rate limited.

The system rate-limits all traffic.

The system repeatedly generates warnings.

39. With Cisco FTD software, which interface mode must be configured to passively receive traffic that passes through the appliance?

ERSPAN

IPS-only

firewall

tap

40. A network administrator is concerned about (he high number of malware files affecting users' machines.

What must be done within the access control policy in Cisco FMC to address this concern?

Create an intrusion policy and set the access control policy to block.

Create an intrusion policy and set the access control policy to allow.

Create a file policy and set the access control policy to allow.

Create a file policy and set the access control policy to block.

Page 5 of 12

41. A security engineer needs to configure a network discovery policy on a Cisco FMC appliance and prevent excessive network discovery events from overloading the FMC database?

Which action must be taken to accomplish this task?

Change the network discovery method to TCP/SY

Configure NetFlow exporters for monitored networks.

Monitor only the default IPv4 and IPv6 network ranges.

Exclude load balancers and NAT devices in the policy.

42. A security engineer is deploying a pair of primary and secondary Cisco FMC devices. The secondary must also receive updates from Cisco Talos.

Which action achieves this goal?

Force failover for the secondary Cisco FMC to synchronize the rule updates from the primary.

Configure the secondary Cisco FMC so that it receives updates from Cisco Talos.

Manually import rule updates onto the secondary Cisco FMC device.

Configure the primary Cisco FMC so that the rules are updated.

43. An administrator is configuring the interface of a Cisco Secure Firewall Threat Defense device in a passive IPS deployment. The device and interface have been identified.

Which set of configuration steps of the administrator take next to complete the implementation?

Set the interface mode to passive. Associate the interface with a security zone. Set the MTU parameter. Reset the interface.

Modify the interface to retransmit received traffic. Associate the interface with a security zone Enable the interface. Sat the MTU parameter.

Modify the interface to retransmit received traffic. Associate the interface with a security zone. Set the MTU parameter.

Set the interface mode to passive. Associate the interface with a security zone. Enable the interface. Set the MTU parameter.

44. An engineer wants to connect a single IP subnet through a Cisco FTD firewall and enforce policy.

There is a requirement to present the internal IP subnet to the outside as a different IP address.

What must be configured to meet these requirements?

Configure the downstream router to perform NA

Configure the upstream router to perform NA

Configure the Cisco FTD firewall in routed mode with NAT enabled.

Configure the Cisco FTD firewall in transparent mode with NAT enabled.

45. On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?

transparent inline mode

TAP mode

strict TCP enforcement

propagate link state

46. An organization is migrating their Cisco ASA devices running in multicontext mode to Cisco FTD devices.

Which action must be taken to ensure that each context on the Cisco ASA is logically separated in the Cisco FTD devices?

Add a native instance to distribute traffic to each Cisco FTD context.

Add the Cisco FTD device to the Cisco ASA port channels.

Configure a container instance in the Cisco FTD for each context in the Cisco AS

Configure the Cisco FTD to use port channels spanning multiple networks.

47. What is an attribute of the risk reporting capability in Cisco Secure Firewall Management Center?

Includes all domains in a multidomain system

Uses the same templates available to standard reports

Includes the current domain in a multidomain system

Uses the XML format to export all reporting

48. When packet capture is used on a Cisco Secure Firewall Threat Defense device and the packet flow is wailing on the malware query, which Snort verdict appears?

retry

replace

block

blocfcflow

49. Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)

The units must be the same version

Both devices can be part of a different group that must be in the same domain when configured within the FM

The units must be different models if they are part of the same series.

The units must be configured only for firewall routed mode.

The units must be the same model.

50. Refer to the exhibit.

A Cisco Secure Firewall Management Center, 7.0 device fails to receive intelligence feed updates. The Cisco Secure Firewall Management Center is configured to use a proxy server that performs SSL inspection.

Which action allows the Cisco Secure Firewall Management Center device to download the intelligence feed updates?

Install a self-signed certificate on the proxy server for intelligence.sourcefire.com.

Verify that the proxy server can use HTTPS to communicate to the internet.

Ensure that proxy authentication is disabled for the Cisco Secure Firewall Management Center device.

Bypass the proxy server for intelligence.sourcefire.com.

Page 6 of 12

51. Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?

configure coredump packet-engine enable

capture-traffic

capture

capture WORD

52. An administrator must use Cisco FMC to install a backup route within the Cisco FTD to route traffic in case of a routing failure with the primary route.

Which action accomplishes this task?

Install the static backup route and modify the metric to be less than the primary route.

Configure EIGRP routing on the FMC to ensure that dynamic routes are always updated.

Use a default route on the FMC instead of having multiple routes contending for priority.

Create the backup route and use route tracking on both routes to a destination IP address in the network.

53. An engineer has been tasked with using Cisco FMC to determine if files being sent through the network are malware.

Which two configuration takes must be performed to achieve this file lookup? (Choose two.)

The Cisco FMC needs to include a SSL decryption policy.

The Cisco FMC needs to connect to the Cisco AMP for Endpoints service.

The Cisco FMC needs to connect to the Cisco ThreatGrid service directly for sandboxing.

The Cisco FMC needs to connect with the FireAMP Cloud.

The Cisco FMC needs to include a file inspection policy for malware lookup.

54. Refer to the exhibit.

An engineer is modifying an access control policy to add a rule to Inspect all DNS traffic that passes it making the change and deploying the policy, they see that DNS traffic Is not being Inspected by the Snort engine.

What is......

The action of the rule is set to trust instead of allow.

The rule must specify the security zone that originates the traffic.

The rule Is configured with the wrong setting for the source port.

The rule must define the source network for inspection as well as the port.

55. A network administrator is configuring an instance of Cisco Secure Firewall Threat Defense, which is registered to Cisco Secure Firewall Management Center, to prevent internal users from downloading executable files from the internet.

What must be created and configured by the administrator to meet the requirement?

Access policy rule that allows users to reach the internet and assigns a file policy that blocks executable downloads to the rule.

File policy that blocks downloads of all executable files and applies the file policy to the default action in the access policy.

File policy rule that allows users to reach the internet with a second rule applied that blocks application use of FT

Access policy rule that allows users to reach the internet with a second rule that blocks application executables.

56. DRAG DROP

An engineer must configure a connection on a Cisco ASA Firewall with a Cisco Secure Firewall Services Module to ensure that the secondary interface takes over all the functions of the primary interface if the primary interface fails.

Drag and drop the code snippets from the bottom onto the boxes in the CLI commands to configure the failover. Not all options are used.

57. Refer to the exhibit.

What is the effect of the existing Cisco FMC configuration?

The remote management port for communication between the Cisco FMC and the managed device changes to port 8443.

The managed device is deleted from the Cisco FM

The SSL-encrypted communication channel between the Cisco FMC and the managed device becomes plain-text communication channel.

The management connection between the Cisco FMC and the Cisco FTD is disabled.

58. An engineer has been tasked with performing an audit of network projects to determine which objects are duplicated across the various firewall models (Cisco Secure Firewall Threat Defense Cisco Secure firewall ASA, and Meraki MX Series) deployed throughout the company.

Which tool will assist the engineer in performing that audit?

Cisco Firepower Device Manager

Cisco SecureX

Cisco Defense Orchestrator

Cisco Secure Firewall Management Center

59. An engineer is configuring two new Cisco FTD devices to replace the existing high availability firewall pair in a highly secure environment. The information exchanged between the FTD devices over the failover link must be encrypted.

Which protocol supports this on the Cisco FTD?

IPsec

SSH

SSL

MACsec

60. A network administrator is trying to configure an access rule to allow access to a specific banking site over HTTPS.

Which method must the administrator use to meet the requirement?

Enable SSL decryption and specify the UR

Define the URL to be blocked and set the application to HTT

Define the URL to be blocked and disable SSL inspection.

Block the category of banking and define the application of WW

Page 7 of 12

61. An engineer is monitoring network traffic from their sales and product development departments, which are on two separate networks.

What must be configured in order to maintain data privacy for both departments?

Use a dedicated IPS inline set for each department to maintain traffic separation

Use 802 1Q mime set Trunk interfaces with VLANs to maintain logical traffic separation

Use passive IDS ports for both departments

Use one pair of inline set in TAP mode for both departments

62. The CEO ask a network administrator to present to management a dashboard that shows custom analysis tables for the top DNS queries URL category statistics, and the URL reputation statistics.

Which action must the administrator take to quickly produce this information for management?

Run the Attack report and filter on DNS to show this information.

Create a new dashboard and add three custom analysis widgets that specify the tables needed.

Modify the Connection Events dashboard to display the information in a view for management.

Copy the intrusion events dashboard tab and modify each widget to show the correct charts.

63. What is the benefit of selecting the trace option for packet capture?

The option indicates whether the packet was dropped or successful.

The option indicated whether the destination host responds through a different path.

The option limits the number of packets that are captured.

The option captures details of each packet.

64. An engineer wants to add an additional Cisco FTD Version 6.2.3 device to their current 6.2.3 deployment to create a high availability pair.

The currently deployed Cisco FTD device is using local management and identical hardware including the available port density to enable the failover and stateful links required in a proper high availability deployment.

Which action ensures that the environment is ready to pair the new Cisco FTD with the old one?

Change from Cisco FDM management to Cisco FMC management on both devices and register them to FM

Ensure that the two devices are assigned IP addresses from the 169 254.0.0/16 range for failover interfaces.

Factory reset the current Cisco FTD so that it can synchronize configurations with the new Cisco FTD device.

Ensure that the configured DNS servers match on the two devices for name resolution.

65. A network engineer must configure IPS mode on a Cisco Secure firewall Threat Defense device to inspect traffic and act as an IDS. The engineer already configured the passive-interface on the secure firewall threat Defense device and SPAN on the switch.

What must be configured next by the engineer?

intrusion policy on the Secure Firewall Threat Defense device

active Interface on me Secure Firewall threat Defense device

DHCP on the switch

active SPAN port on the switch

66. An engineer is configuring a Cisco Secure Firewall Threat Defense device and warns to create a new intrusion rule based on the detection of a specific pattern in the data payload for a new zero-day exploit.

Which keyword type must be used to add a Line that identifies the author of the rule and the date it was created?

metadata

content

reference

gtp_info

67. A network engineer implements a new Cisco Firepower device on the network to take advantage of its intrusion detection functionality. There is a requirement to analyze the traffic going across the device, alert on any malicious traffic, and appear as a bump in the wire.

How should this be implemented?

Specify the BVl IP address as the default gateway for connected devices.

Enable routing on the Cisco Firepower

Add an IP address to the physical Cisco Firepower interfaces.

Configure a bridge group in transparent mode.

68. Which Cisco Firepower Threat Defense, which two interface settings are required when configuring a routed interface? (Choose two.)

Redundant Interface

EtherChannel

Speed

Media Type

Duplex

69. Within an organization's high availability environment where both firewalls are passing traffic, traffic must be segmented based on which department it is destined for. Each department is situated on a different LAN.

What must be configured to meet these requirements?

span EtherChannel clustering

redundant interfaces

high availability active/standby firewalls

multi-instance firewalls

70. A security engineer must add a new policy to block UDP traffic to one server. The engineer adds a new object.

Which action must the engineer take next to identify all the UDP ports?

Define the transport protocol and the mandatory port range.

Add the transport number and specify the type and code.

Add the corresponding IP protocol number for UDP and TC

Specify the transport protocol and leave the port number empty.

Page 8 of 12

71. A network administrator is trying to configure Active Directory authentication for VPN authentication to a Cisco Secure Firewall Threat Defence instance that is registered with Cisco Secure Firewall Management Center.

Which system settings must be configured first in Secure Firewall Management Center to accomplish the goal?

Device, Remote Access VPN

System, Realms

Policies, Authentication

Authentication, Device

72. With Cisco FTD integrated routing and bridging, which interface does the bridge group use to communicate with a routed interface?

switch virtual

bridge group member

bridge virtual

subinterface

73. What is a limitation to consider when running a dynamic routing protocol on a Cisco FTD device in IRB mode?

Only link-stale routing protocols are supported.

Only distance vector routing protocols are supported.

Only EtherChannel interfaces are supposed.

Only nonbridge interfaces are supported.

74. After a network security breach, an engineer must strengthen the security of the corporate network. Upper management must be regularly updated with a high-level overview of any occurring network threats.

Which access must the engineer provide upper management to view the required data from Cisco Secure Firewall Management Center?

Analysis > Status with a sliding time window of one day

Events by priority and classification and set a sliding time window of one day

Reports with a daily recurring task that generates based on the network risk report template

Security Intelligence Statistics dashboard set to Show the Last option to one day

75. The event dashboard within the Cisco FMC has been inundated with low priority intrusion drop events, which are overshadowing high priority events. An engineer has been tasked with reviewing the policies and reducing the low priority events.

Which action should be configured to accomplish this task?

generate events

drop packet

drop connection

drop and generate

76. Refer to the exhibit.

A client that has IP address 192.168.67.102 reports issues when connecting to a remote server.

Based on the topology and output of packet tracer tool, which action resolves the connectivity issue?

Add the route to the destination.

Unblock the access rule on FTDv.

Restart the client-side application.

Reconfigure NAT on FTDv.

77. A company has many Cisco FTD devices managed by a Cisco FMC. The security model requires that access control rule logs be collected for analysis. The security engineer is concerned that the Cisco FMC will not be able to process the volume of logging that will be generated.

Which configuration addresses this concern?

Send Cisco FTD connection events and security events directly to SIEM system for storage and analysis.

Send Cisco FTD connection events and security events to a cluster of Cisco FMC devices for storage and analysis.

Send Cisco FTD connection events and security events to Cisco FMC and configure it to forward logs to SIEM for storage and analysis.

Send Cisco FTD connection events directly to a SIEM system and forward security events from Cisco FMC to the SIEM system for storage and analysis.

78. A network engineer is deploying a pair of Cisco Secure Firewall Threat Defense devices managed by Cisco Secure Firewall Management Center tor High Availability Internet access is a high priority for the business and therefore they have invested in internet circuits from two different ISPs. The requirement from the customer Is that Internet access must do available to their user’s oven if one of the ISPs is down.

Which two features must be deployed to achieve this requirement? (Choose two.)

EtherChannel interfaces

Route Tracking

SLA Monitor

Redundant interfaces

BGP

79. Which two types of objects are reusable and supported by Cisco FMC? (Choose two.)

dynamic key mapping objects that help link HTTP and HTTPS GET requests to Layer 7 application protocols.

reputation-based objects that represent Security Intelligence feeds and lists, application filters based on category and reputation, and file lists

network-based objects that represent IP address and networks, port/protocols pairs, VLAN tags, security zones, and origin/destination country

network-based objects that represent FQDN mappings and networks, port/protocol pairs, VXLAN tags, security zones and origin/destination country

reputation-based objects, such as URL categories

80. An administrator is attempting to add a new FTD device to their FMC behind a NAT device with a NAT ID of NAT001 and a password of Cisco0420l06525. The private IP address of the FMC server is 192.168.45.45. which is being translated to the public IP address of 209.165.200.225/27.

Which command set must be used in order to accomplish this task?

configure manager add 209.165.200.225

configure manager add 192.168.45,45

configure manager add 209.165.200.225 255.255.255.224

configure manager add 209.165.200.225/27

Page 9 of 12

81. An engineer is using the configure manager add Cisc402098527 command to add a new Cisco FTD device to the Cisco FMC; however, the device is not being added.

Why Is this occurring?

The NAT ID is required since the Cisco FMC is behind a NAT device.

The IP address used should be that of the Cisco FT

not the Cisco FM

DONOTRESOLVE must be added to the command

The registration key is missing from the command

82. A security engineer is configuring a remote Cisco FTD that has limited resources and internet bandwidth.

Which malware action and protection option should be configured to reduce the requirement for cloud lookups?

Malware Cloud Lookup and dynamic analysis

Block Malware action and dynamic analysis

Block Malware action and local malware analysis

Block File action and local malware analysis

83. In which two places can thresholding settings be configured? (Choose two.)

on each IPS rule

globally, within the network analysis policy

globally, per intrusion policy

on each access control rule

per preprocessor, within the network analysis policy

84. Which two considerations must be made when deleting and re-adding devices while managing them via Cisco FMC (Choose two).

Before re-adding the device In Cisco FMC, the manager must be added back.

The Cisco FMC web interface prompts users to re-apply access control policies.

Once a device has been deleted, It must be reconfigured before it is re-added to the Cisco FM

An option to re-apply NAT and VPN policies during registration is available, so users do not need to re-apply the polices after registration is completed.

There is no option to re-apply NAT and VPN policies during registration is available, so users need to re-apply the policies after registration is completed.

85. Which license type is required on Cisco ISE to integrate with Cisco FMC pxGrid?

mobility

plus

base

apex

86. Due to an Increase in malicious events, a security engineer must generate a threat report to include intrusion in events, malware events, and security intelligence events.

How Is this information collected in a single report?

Run the default Firepower report.

Export the Attacks Risk report.

Generate a malware report.

Create a Custom report.

87. An engineer integrates Cisco FMC and Cisco ISE using pxGrid.

Which role is assigned for Cisco FMC?

controller

publisher

client

server

88. The network administrator wants to enhance the network security posture by enabling machine learning tor malware detection due to a concern with suspicious Microsoft executable file types that were seen while creating monthly security reports for the CIO.

Which feature must be enabled to accomplish this goal?

Spero

dynamic analysis

static analysis

Ethos

89. DRAG DROP

Drag and drop the steps to restore an automatic device registration failure on the standby Cisco FMC from the left into the correct order on the right. Not all options are used.

90. An engineer must investigate a connectivity issue from an endpoint behind a Cisco FTD device and a public DNS server. The endpoint cannot perform name resolution queries.

Which action must the engineer perform to troubleshoot the issue by simulating real DNS traffic on the Cisco FTD while verifying the Snarl verdict?

Perform a Snort engine capture using tcpdump from the FTD CL

Use the Capture w/Trace wizard in Cisco FM

Create a Custom Workflow in Cisco FM

Run me system support firewall-engine-debug command from me FTD CL

Page 10 of 12

91. After using Firepower for some time and learning about how it interacts with the network, an administrator is trying to correlate malicious activity with a user.

Which widget should be configured to provide this visibility on the Cisco Firepower dashboards?

Custom Analysis

Current Status

Current Sessions

Correlation Events

92. An engineer must integrate a third-party security intelligence feed with Cisco Secure Firewall Management Center. Secure Firewall Management Center is running Version 6.2.3 and has 8 GB of memory.

Which two actions must be taken to implement Threat Intelligence Director? (Choose two.)

Enable REST API access.

Add a TAXII server.

Add the URL of the TAXII server.

Upgrade to version 6.6.

Add 7 GB of memory.

93. What is the role of the casebook feature in Cisco Threat Response?

sharing threat analysts

pulling data via the browser extension

triage automaton with alerting

alert prioritization

94. An engineer is troubleshooting a device that cannot connect to a web server. The connection is initiated from the Cisco FTD inside interface and attempting to reach 10.0.1.100 over the non-standard port of 9443 The host the engineer is attempting the connection from is at the IP address of 10.20.10.20. In order to determine what is happening to the packets on the network, the engineer decides to use the FTD packet capture tool.

Which capture configuration should be used to gather the information needed to troubleshoot this issue?

A)

Option A

Option B

Option C

Option D

95. What is required to deploy a managed device inline in terms of network interfaces?

Inline interfaces, security zones, MTU, and mode

Inline interfaces, MTU, and mode

Passive interface, MTU, and mode

Passive interface, security zone, MTU, and mode

96. A security engineer must configure policies tor a recently deployed Cisco FTD. The security policy for the company dictates that when five or more connections from external sources are initiated within 2 minutes, there is cause for concern.

Which type of policy must be configured in Cisco FMC z generate an alert when this condition is triggered?

application detector

access control

intrusion

correlation

97. An engineer is creating an URL object on Cisco FMC.

How must it be configured so that the object will match for HTTPS traffic in an access control policy?

Specify the protocol to match (HTTP or HTTPS).

Use the FQDN including the subdomain for the website

Define the path to the individual webpage that uses HTTP

Use the subject common name from the website certificate

98. An engineer configures a network discovery policy on Cisco FMC. Upon configuration, it is noticed that excessive and misleading events filing the database and overloading the Cisco FMC. A monitored NAT device is executing multiple updates of its operating system in a short period of time.

What configuration change must be made to alleviate this issue?

Leave default networks.

Change the method to TCP/SY

Increase the number of entries on the NAT device.

Exclude load balancers and NAT devices.

99. DRAG DROP

Refer to the exhibit.

An engineer configures a NAT rule allowing clients to use the internet only if clients are located on the directly connected internal network. Dynamic auto PAT must be configured.

Drag and drop the NAT rules from the left onto the corresponding targets on the right. Not all options are used.

100. An engineer is configuring a second Cisco FMC as a standby device but is unable to register with the active unit.

What is causing this issue?

The primary FMC currently has devices connected to it.

The code versions running on the Cisco FMC devices are different

The licensing purchased does not include high availability

There is only 10 Mbps of bandwidth between the two devices.

Page 11 of 12

101. An administrator is adding a QoS policy to a Cisco FTD deployment. When a new rule is added to the policy and QoS is applied on 'Interfaces in Destination Interface Objects", no interface objects are available.

What is the problem?

The FTD is out of available resources lor use. so QoS cannot be added

The network segments that the interfaces are on do not have contiguous IP space

QoS is available only on routed interfaces, and this device is in transparent mode.

A conflict exists between the destination interface types that is preventing QoS from being added

102. Which Cisco Advanced Malware Protection for Endpoints policy is used only for monitoring endpoint actively?

Windows domain controller

audit

triage

protection

103. Which Cisco FMC report gives the analyst information about the ports and protocols that are related to the configured sensitive network for analysis?

Malware Report

Host Report

Firepower Report

Network Report

104. An engineer must configure a Cisco FMC dashboard in a multidomain deployment.

Which action must the engineer take to edit a report template from an ancestor domain?

Add it as a separate widget.

Copy it to the current domain

Assign themselves ownership of it

Change the document attributes.

105. A company is deploying Cisco Secure Endpoint private cloud. The Secure Endpoint private cloud instance has already been deployed by the server administrator. The server administrator provided the hostname of the private cloud instance to the network engineer via email.

What additional information does the network engineer require from the server administrator to be able to make the connection to Secure Endpoint private cloud in Cisco Secure Firewall Management Centre?

SSL certificate for the Secure Endpoint ornate cloud instance

Internet access for the Secure End point private cloud to reach the Secure Endpoint public cloud

Username and password to the Secure Endpoint private cloud instance

IP address and port number for the connection proxy

106. Which feature sets up multiple interfaces on a Cisco Secure Firewall Threat Defense to be on the same subnet?

EtherChannel

SVI

BVI

security levels

107. IT management is asking the network engineer to provide high-level summary statistics of the Cisco FTD appliance in the network. The business is approaching a peak season so the need to maintain business uptime is high.

Which report type should be used to gather this information?

Malware Report

Standard Report

SNMP Report

Risk Report

108. An organization created a custom application that is being flagged by Cisco Secure Endpoint. The application must be exempt from being flagged.

What is the process to meet the requirement?

Modify the custom detection list to exclude me custom application.

Preculculate the hash value of the custom application and add it to the allowed applications.

Configure the custom application to use the information-store paths.

Add the custom application to the DFC 1st and update the policy.

109. Which Firepower feature allows users to configure bridges in routed mode and enables devices to perform Layer 2 switching between interfaces?

FlexConfig

BDI

SGT

IRB

110. An engineer wants to perform a packet capture on the Cisco FTD to confirm that the host using IP address 192 168.100.100 has the MAC address of 0042 7734.103 to help troubleshoot a connectivity issue.

What is the correct tcpdump command syntax to ensure that the MAC address appears in the packet capture output?

-nm src 192.168.100.100

-ne src 192.168.100.100

-w capture.pcap -s 1518 host 192.168.100.100 mac

-w capture.pcap -s 1518 host 192.168.100.100 ether

Page 12 of 12

111. Refer to the exhibit.

An engineer must import three network objects into the Cisco Secure Firewall Management Center by using a CSV file.

Which header must be configured in the CSV file to accomplish the task?

NAME; DESCRIPTION; TYPE; VALUE; LOOKUP;

Name; Description; Type; Value; Lookup;

Name; Description; Type; Value; DN;

NAME; DESCRIPTION; TYPE; VALUE; DN;

112. Upon detecting a flagrant threat on an endpoint, which two technologies instruct Cisco Identity Services Engine to contain the infected endpoint either manually or automatically? (Choose two.)

Cisco ASA 5500 Series

Cisco FMC

Cisco AMP

Cisco Stealthwatch

Cisco ASR 7200 Series

113. An engineer must investigate a connectivity issue and decides to use the packet capture feature on Cisco FTD. The goal is to see the real packet going through the Cisco FTD device and see the Snort detection actions as a part of the output. After the capture-traffic command is issued, only the packets are displayed.

Which action resolves this issue?

Use the verbose option as a part of the capture-traffic command

Use the capture command and specify the trace option to get the required information.

Specify the trace using the -T option after the capture-traffic command.

Perform the trace within the Cisco FMC GUI instead of the Cisco FTD CL

114. Network traffic coining from an organization's CEO must never be denied.

Which access control policy configuration option should be used if the deployment engineer is not permitted to create a rule to allow all traffic?

Configure firewall bypass.

Change the intrusion policy from security to balance.

Configure a trust policy for the CE

Create a NAT policy just for the CE

115. Which two routing options are valid with Cisco FTD? (Choose Two)

BGPv6

ECMP with up to three equal cost paths across multiple interfaces

ECMP with up to three equal cost paths across a single interface

BGPv4 in transparent firewall mode

BGPv4 with nonstop forwarding

TAGS:

300-710, 300-710 exam dumps

Notify of

Label

Name*

Email*

Website

Label

Name*

Email*

Website

0 Comments

Oldest

Newest Most Voted

Inline Feedbacks

View all comments

Get 300-710 Dumps Full Version

Q&As: 381
Versions: PDF and Software Download Now

About Dumpsinfo

Dumpsinfo is a good platform providing the latest exam information and dumps questions for all IT certification exams. You can study all the latest exam dumps questions online.

[email protected]

Mon - Sat 9:00am - 6:00pm

300-710 Dumps Questions – Effective Way to Get Certified

Related

Posts

800-150 Dumps Guarantee You Pass 800-150 Exam Easily

Advance Your Career by Using Online 300-220 Dumps

Study Online 500-650 Exam Dumps to Pass

Get Certified Easily with Online 700-841 Dumps

About Us

EMAIL

Services

Opening Hours