300-710 Dumps Questions - Effective Way to Get Certified

300-710 Dumps Questions – Effective Way to Get Certified

Category:

Comments:

0 Comments

Post Date:

March 12, 2023

If you're in the field of Cisco, you know how important it is to stay up-to-date with the latest knowledge and skills to protect your organization's networks and data. One way to do that is by obtaining CCNP Security, specifically the 300-710 exam. While preparing for the 300-710 exam, you might consider using 300-710 dumps to help you familiarize yourself with the exam format and content. These 300-710 exam dumps questions can be an effective way to gauge your knowledge and identify areas where you may need additional study. Study online free 300-710 exam dumps below.

Page 1 of 10

1. A network administrator is trying to configure an access rule to allow access to a specific banking site over HTTPS.

Which method must the administrator use to meet the requirement?

Enable SSL decryption and specify the UR

Define the URL to be blocked and set the application to HTT

Define the URL to be blocked and disable SSL inspection.

Block the category of banking and define the application of WW

2. An engineer is configuring a custom intrusion rule on Cisco FMC. The engineer needs the rule to search the payload or stream for the string "|45 5* 26 27 4 0A|*.

Which Keyword must the engineer use with this stung lo create an argument for packed inspection?

metadata

Content

Protected _ content

data

3. A software development company hosts the website http:dev.company.com for contractors to share code for projects they are working on with internal developers. The web server is on premises and is protected by a Cisco Secure Firewall Threat Defense appliance. The network administrator is worried about someone trying to transmit infected files to internal users via this site.

Which type of policy must be able associated with an access control policy to enable Cisco Secure Firewall Malware Defense to detect and block malware?

SSL policy

Prefilter policy

File policy

Network discovery policy

4. An engineer is monitoring network traffic from their sales and product development departments, which are on two separate networks.

What must be configured in order to maintain data privacy for both departments?

Use a dedicated IPS inline set for each department to maintain traffic separation

Use 802 1Q mime set Trunk interfaces with VLANs to maintain logical traffic separation

Use passive IDS ports for both departments

Use one pair of inline set in TAP mode for both departments

5. Which CLI command is used to control special handling of ClientHello messages?

system support ssl-client-hello-tuning

system support ssl-client-hello-display

system support ssl-client-hello-force-reset

system support ssl-client-hello-enabled

6. An engineer is configuring a second Cisco FMC as a standby device but is unable to register with the active unit.

What is causing this issue?

The primary FMC currently has devices connected to it.

The code versions running on the Cisco FMC devices are different

The licensing purchased does not include high availability

There is only 10 Mbps of bandwidth between the two devices.

7. A network administrator notices that remote access VPN users are not reachable from inside the network. It is determined that routing is configured correctly, however return traffic is entering the firewall but not leaving it.

What is the reason for this issue?

A manual NAT exemption rule does not exist at the top of the NAT table.

An external NAT IP address is not configured.

An external NAT IP address is configured to match the wrong interface.

An object NAT exemption rule does not exist at the top of the NAT table.

8. An engineer is configuring a Cisco IPS to protect the network and wants to test a policy before deploying it. A copy of each incoming packet needs to be monitored while traffic flow remains constant.

Which IPS mode should be implemented to meet these requirements?

Inline tap

passive

transparent

routed

9. What is the disadvantage of setting up a site-to-site VPN in a clustered-units environment?

VPN connections can be re-established only if the failed master unit recovers.

Smart License is required to maintain VPN connections simultaneously across all cluster units.

VPN connections must be re-established when a new master unit is elected.

Only established VPN connections are maintained when a new master unit is elected.

10. An administrator is adding a new URL-based category feed to the Cisco FMC for use within the policies. The intelligence source does not use STIX. but instead uses a .txt file format.

Which action ensures that regular updates are provided?

Add a URL source and select the flat file type within Cisco FM

Upload the .txt file and configure automatic updates using the embedded UR

Add a TAXII feed source and input the URL for the feed.

Convert the .txt file to STIX and upload it to the Cisco FM

Page 2 of 10

11. An administrator is setting up Cisco Firepower to send data to the Cisco Stealthwatch appliances. The NetFlow_Set_Parameters object is already created, but NetFlow is not being sent to the flow collector.

What must be done to prevent this from occurring?

Add the NetFlow_Send_Destination object to the configuration

Create a Security Intelligence object to send the data to Cisco Stealthwatch

Create a service identifier to enable the NetFlow service

Add the NetFlow_Add_Destination object to the configuration

12. An administrator receives reports that users cannot access a cloud-hosted web server. The access control policy was recently updated with several new policy additions and URL filtering.

What must be done to troubleshoot the issue and restore access without sacrificing the organization's security posture?

Create a new access control policy rule to allow ports 80 and 443 to the FQDN of the web server.

Identify the blocked traffic in the Cisco FMC connection events to validate the block, and modify the policy to allow the traffic to the web server.

Verify the blocks using the packet capture tool and create a rule with the action monitor for the traffic.

Download a PCAP of the traffic attempts to verify the blocks and use the flexconfig objects to create a rule that allows only the required traffic to the destination server.

13. How many report templates does the Cisco Firepower Management Center support?

unlimited

14. A network administrator is troubleshooting access to a website hosted behind a Cisco FTD device External clients cannot access the web server via HTTPS The IP address configured on the web server is 192 168 7.46 The administrator is running the command capture CAP interface outside match ip any 192.168.7.46 255.255.255.255 but cannot see any traffic in the capture.

Why is this occurring?

The capture must use the public IP address of the web server.

The FTD has no route to the web server.

The access policy is blocking the traffic.

The packet capture shows only blocked traffic

15. Encrypted Visibility Engine (EVE) is enabled under which lab on an access control policy in Cisco Secure Firewall Management Centre?

Network Analysis Policy

Advanced

Security Intelligence

SSL

16. An organization is installing a new Cisco FTD appliance in the network. An engineer is tasked with configuring access between two network segments within the same IP subnet.

Which step is needed to accomplish this task?

Assign an IP address to the Bridge Virtual Interface.

Permit BPDU packets to prevent loops.

Specify a name for the bridge group.

Add a separate bridge group for each segment.

17. An engineer has been tasked with providing disaster recovery for an organization's primary Cisco FMC.

What must be done on the primary and secondary Cisco FMCs to ensure that a copy of the original corporate policy is available if the primary Cisco FMC fails?

Restore the primary Cisco FMC backup configuration to the secondary Cisco FMC device when the primary device fails.

Configure high-availability in both the primary and secondary Cisco FMCs.

Connect the primary and secondary Cisco FMC devices with Category 6 cables of not more than 10 meters in length.

Place the active Cisco FMC device on the same trusted management network as the standby device.

18. A network administrator needs to create a policy on Cisco Firepower to fast-path traffic to avoid

Layer 7 inspection. The rate at which traffic is inspected must be optimized.

What must be done to achieve this goal?

Enable lhe FXOS for multi-instance.

Configure a prefilter policy.

Configure modular policy framework.

Disable TCP inspection.

19. Refer to the exhibit.

An engineer is analyzing a Network Risk Report from Cisco FMC.

Which application must the engineer take immediate action against to prevent unauthorized network use?

Kerberos

YouTube

Chrome

TOR

20. An engineer has been tasked with using Cisco FMC to determine if files being sent through the network are malware.

Which two configuration takes must be performed to achieve this file lookup? (Choose two.)

The Cisco FMC needs to include a SSL decryption policy.

The Cisco FMC needs to connect to the Cisco AMP for Endpoints service.

The Cisco FMC needs to connect to the Cisco ThreatGrid service directly for sandboxing.

The Cisco FMC needs to connect with the FireAMP Cloud.

The Cisco FMC needs to include a file inspection policy for malware lookup.

Page 3 of 10

21. Upon detecting a flagrant threat on an endpoint, which two technologies instruct Cisco Identity Services Engine to contain the infected endpoint either manually or automatically? (Choose two.)

Cisco ASA 5500 Series

Cisco FMC

Cisco AMP

Cisco Stealthwatch

Cisco ASR 7200 Series

22. A network administrator is deploying a Cisco IPS appliance and needs it to operate initially without affecting traffic flows.

It must also collect data to provide a baseline of unwanted traffic before being reconfigured to drop it.

Which Cisco IPS mode meets these requirements?

failsafe

inline tap

promiscuous

bypass

23. Refer to the exhibit.

What is the effect of the existing Cisco FMC configuration?

The remote management port for communication between the Cisco FMC and the managed device changes to port 8443.

The managed device is deleted from the Cisco FM

The SSL-encrypted communication channel between the Cisco FMC and the managed device becomes plain-text communication channel.

The management connection between the Cisco FMC and the Cisco FTD is disabled.

24. A network administrator wants to block traffic to a known malware site at https://www.badsite.com and all subdomains while ensuring no packets from any internal client are sent to that site.

Which type of policy must the network administrator use to accomplish this goal?

Prefilter policy

SSL policy

DNS policy

Access Control policy with URL filtering

25. A company is deploying Cisco Secure Endpoint private cloud. The Secure Endpoint private cloud instance has already been deployed by the server administrator. The server administrator provided the hostname of the private cloud instance to the network engineer via email.

What additional information does the network engineer require from the server administrator to be able to make the connection to Secure Endpoint private cloud in Cisco Secure Firewall Management Centre?

SSL certificate for the Secure Endpoint ornate cloud instance

Internet access for the Secure End point private cloud to reach the Secure Endpoint public cloud

Username and password to the Secure Endpoint private cloud instance

IP address and port number for the connection proxy

26. Which two statements about deleting and re-adding a device to Cisco FMC are true? (Choose two.)

An option to re-apply NAT and VPN policies during registration is available, so users do not need to re- apply the policies after registration is completed.

Before re-adding the device in Cisco FMC, you must add the manager back in the device.

No option to delete and re-add a device is available in the Cisco FMC web interface.

The Cisco FMC web interface prompts users to re-apply access control policies.

No option to re-apply NAT and VPN policies during registration is available, so users need to re-apply the policies after registration is completed.

27. A Cisco FMC administrator wants to configure fastpathing of trusted network traffic to increase performance.

In which type of policy would the administrator configure this feature?

Identity policy

Prefilter policy

Network Analysis policy

Intrusion policy

28. Which CLI command is used to generate firewall debug messages on a Cisco Firepower?

system support firewall-engine-debug

system support ssl-debug

system support platform

system support dump-table

29. A network engineer wants to add a third-party threat feed into the Cisco FMC for enhanced threat detection.

Which action should be taken to accomplish this goal?

Enable Threat Intelligence Director using STIX and TAXII

Enable Rapid Threat Containment using REST APIs

Enable Threat Intelligence Director using REST APIs

Enable Rapid Threat Containment using STIX and TAXII

30. An engineer is troubleshooting an intermittent connectivity issue on a Cisco Secure Firewall Threat Defense appliance and must collect 24 hours' worth of data. The engineer started a packet capture. Whenever it stops prematurely during this time period. The engineer notices that the packet capture butter size is set to the default of 32 MB.

Which butter S170 is the maximum that the engineer must sot to able the packet capture to run successfully?

64 MB

1GB

10 GB

100 GB

Page 4 of 10

31. A network administrator wants to configure a Cisco Secure Firewall Threat Defense instance managed by Cisco Secure Firewall Management Center to block traffic to known cryptomning networks.

Which system settings must the administrator configure in Secure Firewall Management Center to meet the requirement?

Access Policy. Security Intelligence

Malware Policy.

Rules Intrusion Policy. Security Intelligence

Access Policy. Rules

32. Which two dynamic routing protocols are supported in Firepower Threat Defense without using FlexConfig? (Choose two.)

EIGRP

OSPF

static routing

IS-IS

BGP

33. An engineer needs to configure remote storage on Cisco FMC. Configuration backups must be available from a secure location on the network for disaster recovery. Reports need to back up to a shared location that auditors can access with their Active Directory logins.

Which strategy must the engineer use to meet these objectives?

Use SMB for backups and NFS for reports.

Use NFS for both backups and reports.

Use SMB for both backups and reports.

Use SSH for backups and NFS for reports.

34. An engineer is troubleshooting a file that is being blocked by a Cisco FTD device on the network.

The user is reporting that the file is not malicious.

Which action does the engineer take to identify the file and validate whether or not it is malicious?

identify the file in the intrusion events and submit it to Threat Grid for analysis.

Use FMC file analysis to look for the file and select Analyze to determine its disposition.

Use the context explorer to find the file and download it to the local machine for investigation.

Right click the connection event and send the file to AMP for Endpoints to see if the hash is malicious.

35. Refer to the exhibit.

An organization has an access control rule with the intention of sending all social media traffic for inspection After using the rule for some time, the administrator notices that the traffic is not being inspected, but is being automatically allowed.

What must be done to address this issue?

Modify the selected application within the rule

Change the intrusion policy to connectivity over security.

Modify the rule action from trust to allow

Add the social network URLs to the block list

36. An administrator is configuring their transparent Cisco FTD device to receive ERSPAN traffic from multiple switches on a passive port, but the Cisco FTD is not processing the traffic.

What is the problem?

The switches do not have Layer 3 connectivity to the FTD device for GRE traffic transmission.

The switches were not set up with a monitor session ID that matches the flow ID defined on the Cisco FT

The Cisco FTD must be in routed mode to process ERSPAN traffic.

The Cisco FTD must be configured with an ERSPAN port not a passive port.

37. An engineer is working on a LAN switch and has noticed that its network connection to the mime Cisco IPS has gone down Upon troubleshooting it is determined that the switch is working as expected.

What must have been implemented for this failure to occur?

The upstream router has a misconfigured routing protocol

Link-state propagation is enabled

The Cisco IPS has been configured to be in fail-open mode

The Cisco IPS is configured in detection mode

38. An engineer must change the mode of a Cisco Secure Firewall Threat Defense (FTD) firewall in the

Cisco Secure Firewall Management Center (FMC) inventory.

The engineer must take these actions:

• Register Secure FTD with Secure FMC.

• Change the firewall mode.

• Deregister the Secure FTD device from Secure FMC.

How must the engineer take FTD take the actions?

Reload the Secure FTD device.

Configure the management IP address.

Access the Secure FTD CLI from the console port.

Erase the Secure FTD configuration

39. An engineer must investigate a connectivity issue and decides to use the packet capture feature on Cisco FTD. The goal is to see the real packet going through the Cisco FTD device and see the Snort detection actions as a part of the output. After the capture-traffic command is issued, only the packets are displayed.

Which action resolves this issue?

Use the verbose option as a part of the capture-traffic command

Use the capture command and specify the trace option to get the required information.

Specify the trace using the -T option after the capture-traffic command.

Perform the trace within the Cisco FMC GUI instead of the Cisco FTD CL

40. A network administrator is configuring Snort inspection policies and is seeing failed deployment messages in Cisco FMC.

What information should the administrator generate for Cisco TAC to help troubleshoot?

A "show tech" file for the device in question.

A "troubleshoot" file for the device in question.

A "troubleshoot" file for the Cisco FM

A "show tech" for the Cisco FM

Page 5 of 10

41. With Cisco FTD software, which interface mode must be configured to passively receive traffic that passes through the appliance?

ERSPAN

IPS-only

firewall

tap

42. Which two deployment types support high availability? (Choose two.)

transparent

routed

clustered

intra-chassis multi-instance

virtual appliance in public cloud

43. An analyst using the security analyst account permissions is trying to view the Correlations Events Widget but is not able to access it. However, other dashboards are accessible.

Why is this occurring?

An API restriction within the Cisco FMC is preventing the widget from displaying.

The widget is configured to display only when active events are present.

The widget is not configured within the Cisco FM

The security analyst role does not have permission to view this widget.

44. An engineer is creating an URL object on Cisco FMC.

How must it be configured so that the object will match for HTTPS traffic in an access control policy?

Specify the protocol to match (HTTP or HTTPS).

Use the FQDN including the subdomain for the website

Define the path to the individual webpage that uses HTTP

Use the subject common name from the website certificate

45. A company is in the process of deploying intrusion protection with Cisco FTDs managed by a Cisco FMC.

Which action must be selected to enable fewer rules detect only critical conditions and avoid false positives?

Connectivity Over Security

Balanced Security and Connectivity

Maximum Detection

No Rules Active

46. An organization must be able to ingest NetFlow traffic from their Cisco FTD device to Cisco Stealthwatch for behavioral analysis.

What must be configured on the Cisco FTD to meet this requirement?

interface object to export NetFlow

security intelligence object for NetFlow

flexconfig object for NetFlow

variable set object for NetFlow

47. An organization has a Cisco FTD that uses bridge groups to pass traffic from the inside interfaces to the outside interfaces. They are unable to gather information about neighbouring Cisco devices or use multicast in their environment.

What must be done to resolve this issue?

Create a firewall rule to allow CDP traffic.

Create a bridge group with the firewall interfaces.

Change the firewall mode to transparent.

Change the firewall mode to routed.

48. An engineer wants to perform a packet capture on the Cisco FTD to confirm that the host using IP address 192 168.100.100 has the MAC address of 0042 7734.103 to help troubleshoot a connectivity issue.

What is the correct tcpdump command syntax to ensure that the MAC address appears in the packet capture output?

-nm src 192.168.100.100

-ne src 192.168.100.100

-w capture.pcap -s 1518 host 192.168.100.100 mac

-w capture.pcap -s 1518 host 192.168.100.100 ether

49. What is the role of the casebook feature in Cisco Threat Response?

sharing threat analysts

pulling data via the browser extension

triage automaton with alerting

alert prioritization

50. An engineer is configuring a cisco FTD appliance in IPS-only mode and needs to utilize fail-to-wire interfaces.

Which interface mode should be used to meet these requirements?

transparent

routed

passive

inline set

Page 6 of 10

51. An analyst is investigating a potentially compromised endpoint within the network and pulls a host report for the endpoint in question to collect metrics and documentation.

What information should be taken from this report for the investigation?

client applications by user, web applications, and user connections

number of attacked machines, sources of the attack, and traffic patterns

intrusion events, host connections, and user sessions

threat detections over time and application protocols transferring malware

52. The network administrator wants to enhance the network security posture by enabling machine learning tor malware detection due to a concern with suspicious Microsoft executable file types that were seen while creating monthly security reports for the CIO.

Which feature must be enabled to accomplish this goal?

Spero

dynamic analysis

static analysis

Ethos

53. An engineer is configuring URL filtering for a Cisco FTD device in Cisco FMC. Users must receive a warning when they access http:/'www.Dac'additstte.corn with the option of continuing to the website if they choose to. No other websites should be blacked.

Which two actions must the engineer lake to meet these requirements? (Choose two.)

On the HTTP Responses tab of the access control policy editor, set the Block Response Page to Custom.

On the HTTP Responses tab of the access control policy editor, sot the Interactive Block Response Page to system-provided.

Configure the default action for the access control policy to Interactive Block.

Configure an access control rule that matches the Adult URL category and se: the action to interactive Block.

Configure an access control rule that matches an URL object for http://www.badaduitslte.com; and set the action to interactive Block.

54. Which two types of objects are reusable and supported by Cisco FMC? (Choose two.)

dynamic key mapping objects that help link HTTP and HTTPS GET requests to Layer 7 application protocols.

reputation-based objects that represent Security Intelligence feeds and lists, application filters based on category and reputation, and file lists

network-based objects that represent IP address and networks, port/protocols pairs, VLAN tags, security zones, and origin/destination country

network-based objects that represent FQDN mappings and networks, port/protocol pairs, VXLAN tags, security zones and origin/destination country

reputation-based objects, such as URL categories

55. A network engineer detects a connectivity issue between Cisco Secure Firewall Management Centre and Cisco Secure Firewall Threat Defense Initial troubleshooting indicates that heartbeats and events not being received. The engineer re-establishes the secure channels between both peers.

Which two commands must the engineer run to resolve the issue? (Choose two.)

manage_procs.pl

sudo stats_unified.pl

sudo perfstats -Cq < /var/sf/rna/correlator-stats/now

show history

show disk-manager

56. A security engineer found a suspicious file from an employee email address and is trying to upload it

for analysis, however the upload is failing. The last registration status is still active.

What is the cause for this issue?

Cisco AMP for Networks is unable to contact Cisco Threat Grid on premise.

Cisco AMP for Networks is unable to contact Cisco Threat Grid Cloud.

There is a host limit set.

The user agent status is set to monitor.

57. A network administrator must create an EtherChannel Interface on a new Cisco Firepower 9300 appliance registered with an FMC tor high availability.

Where must the administrator create the EtherChannel interface?

FMC CLI

FTD CLI

FXOS CLI

FMC GUI

58. An engineer currently has a Cisco FTD device registered to the Cisco FMC and is assigned the address of 10 10.50.12. The organization is upgrading the addressing schemes and there is a requirement to convert the addresses to a format that provides an adequate amount of addresses on the network.

What should the engineer do to ensure that the new addressing takes effect and can be used for the Cisco FTD to Cisco FMC connection?

Delete and reregister the device to Cisco FMC

Update the IP addresses from IFV4 to IPv6 without deleting the device from Cisco FMC

Format and reregister the device to Cisco FM

Cisco FMC does not support devices that use IPv4 IP addresses.

59. Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)

The units must be the same version

Both devices can be part of a different group that must be in the same domain when configured within the FM

The units must be different models if they are part of the same series.

The units must be configured only for firewall routed mode.

The units must be the same model.

60. A network security engineer must export packet captures from the Cisco FMC web browser while troubleshooting an issue. When navigating to the address https:///capture/CAPI/pcap/test.pcap. an error 403: Forbidden is given instead of the PCAP file.

Which action must the engineer take to resolve this issue?

Disable the HTTPS server and use HTTP instead.

Enable the HTTPS server for the device platform policy.

Disable the proxy setting on the browser.

Use the Cisco FTD IP address as the proxy server setting on the browser.

Page 7 of 10

61. Within Cisco Firepower Management Center, where does a user add or modify widgets?

dashboard

reporting

context explorer

summary tool

62. An engineer attempts to pull the configuration for a Cisco FTD sensor to review with Cisco TAC but does not have direct access to the CU for the device. The CLl for the device is managed by Cisco FMC to which the engineer has access.

Which action in Cisco FMC grants access to the CLl for the device?

Export the configuration using the Import/Export tool within Cisco FM

Create a backup of the configuration within the Cisco FM

Use the show run all command in the Cisco FTD CLI feature within Cisco FM

Download the configuration file within the File Download section of Cisco FM

63. A network security engineer must replace a faulty Cisco FTD device in a high availability pair.

Which action must be taken while replacing the faulty unit?

Shut down the Cisco FMC before powering up the replacement unit.

Ensure that the faulty Cisco FTD device remains registered to the Cisco FM

Unregister the faulty Cisco FTD device from the Cisco FMC

Shut down the active Cisco FTD device before powering up the replacement unit.

64. An engineer is implementing Cisco FTD in the network and is determining which Firepower mode to use. The organization needs to have multiple virtual Firepower devices working separately inside of the FTD appliance to provide traffic segmentation.

Which deployment mode should be configured in the Cisco Firepower Management Console to support these requirements?

multiple deployment

single-context

single deployment

multi-instance

65. Refer to the exhibit.

An engineer is modifying an access control pokey to add a rule to inspect all DNS traffic that passes through the firewall After making the change and deploying the pokey they see that DNS traffic is not bang inspected by the Snort engine.

What is the problem?

The rule must specify the security zone that originates the traffic

The rule must define the source network for inspection as well as the port

The action of the rule is set to trust instead of allow.

The rule is configured with the wrong setting for the source port

66. An engineer defines a new rule while configuring an Access Control Policy. After deploying the policy, the rule is not working as expected and the hit counters associated with the rule are showing zero.

What is causing this error?

Logging is not enabled for the rule.

The rule was not enabled after being created.

The wrong source interface for Snort was selected in the rule.

An incorrect application signature was used in the rule.

67. An engineer must define a URL object on Cisco FMC.

What is the correct method to specify the URL without performing SSL inspection?

Use Subject Common Name value.

Specify all subdomains in the object group.

Specify the protocol in the object.

Include all URLs from CRL Distribution Points.

68. An engineer is attempting to add a new FTD device to their FMC behind a NAT device with a NAT ID of ACME001 and a password of Cisco388267669.

Which command set must be used in order to accomplish this?

configure manager add ACME001

configure manager add ACME0O1

configure manager add DONTRESOLVE AMCE001

configure manager add registration key> ACME001

69. Which limitation applies to Cisco Firepower Management Center dashboards in a multidomain environment?

Child domains can view but not edit dashboards that originate from an ancestor domain.

Child domains have access to only a limited set of widgets from ancestor domains.

Only the administrator of the top ancestor domain can view dashboards.

Child domains cannot view dashboards that originate from an ancestor domain.

70. An engineer has been tasked with performing an audit of network projects to determine which objects are duplicated across the various firewall models (Cisco Secure Firewall Threat Defense Cisco Secure firewall ASA, and Meraki MX Series) deployed throughout the company.

Which tool will assist the engineer in performing that audit?

Cisco Firepower Device Manager

Cisco SecureX

Cisco Defense Orchestrator

Cisco Secure Firewall Management Center

Page 8 of 10

71. With a recent summer time change, system logs are showing activity that occurred to be an hour behind real time.

Which action should be taken to resolve this issue?

Manually adjust the time to the correct hour on all managed devices

Configure the system clock settings to use NTP with Daylight Savings checked

Manually adjust the time to the correct hour on the Cisco FM

Configure the system clock settings to use NTP

72. An engineer is configuring a custom application detector for HTTP traffic and wants to import a file that was provided by a third party.

Which type of flies are advanced application detectors creates and uploaded as?

Perl script

NBAR protocol

LUA script

Python program

73. A network engineer is configuring URL Filtering on Firepower Threat Defense.

Which two port requirements on the Firepower Management Center must be validated to allow communication with the cloud service? (Choose two.)

outbound port TCP/443

inbound port TCP/80

outbound port TCP/8080

inbound port TCP/443

outbound port TCP/80

74. What is a limitation to consider when running a dynamic routing protocol on a Cisco FTD device in IRB mode?

Only link-stale routing protocols are supported.

Only distance vector routing protocols are supported.

Only EtherChannel interfaces are supposed.

Only nonbridge interfaces are supported.

75. Which Cisco Advanced Malware Protection for Endpoints policy is used only for monitoring endpoint actively?

Windows domain controller

audit

triage

protection

76. Which object type supports object overrides?

time range

security group tag

network object

DNS server group

77. An engineer is configuring URL filtering tor a Cisco Secure Firewall Threat Defense device in Cisco Secure Firewall Management Centre. Use's must receive a warning when they access ..wwww badaduitsito com with the option of continuing to the website if they choose to No other websites should he blocked.

Which two actions must the engineer take to moot these requirements?

Configure an access control rule that matches an URL object for http://www.Dadadullsile.com' and set the action to Interactive Block.

On the HTTP Responses tab of the access control policy editor, set the Interactive Block Response Page to System-provided.

Configure the default action for the access control policy to Interactive Block.

On the HTTP Responses tab of the access control policy editor set the Block Response Page to Custom.

Configure an access control rule that matches the Adult URL category and sot the action to Interactive Block

78. An organization is implementing Cisco FTD using transparent mode in the network.

Which rule in the default Access Control Policy ensures that this deployment does not create a loop in the network?

ARP inspection is enabled by default.

Multicast and broadcast packets are denied by default.

STP BPDU packets are allowed by default.

ARP packets are allowed by default.

79. Which feature is supported by IRB on Cisco FTD devices?

redundant interface

dynamic routing protocol

EtherChannel interface

high-availability cluster

80. An administrator is configuring a new report template off. of a saved search within Cisco Secure Firewall Management Centre. The goal is to use the malware analysis report template, but use a different type saved search as the basis. The report is not working.

What must be considered when configuring this report template?

Saved searches can be used for the same report template only

Saved searches are available freely for all report templates within the same domain.

Saved searches from a different report template must be used.

Saved searches must be renamed before using for different report template.

Page 9 of 10

81. A network engineer must configure IPS mode on a Cisco Secure firewall Threat Defense device to inspect traffic and act as an IDS. The engineer already configured the passive-interface on the secure firewall threat Defence device and SPAN on the switch.

What must be configured next by the engineer?

intrusion policy on the Secure Firewall Threat Defense device

active Interface on me Secure Firewall threat Defense device

DHCP on the switch

active SPAN port on the switch

82. When creating a report template, how can the results be limited to show only the activity of a specific subnet?

Create a custom search in Firepower Management Center and select it in each section of the report.

Add an Input Parameter in the Advanced Settings of the report, and set the type to Network/I

Add a Table View section to the report with the Search field defined as the network in CIDR format.

Select IP Address as the X-Axis in each section of the report.

83. An engineer configures an access control rule that deploys file policy configurations to security zones or tunnel zones, and it causes the device to restart.

What is the reason for the restart?

Source or destination security zones in the access control rule matches the security zones that are associated with interfaces on the target devices.

The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the destination policy.

Source or destination security zones in the source tunnel zone do not match the security zones that are associated with interfaces on the target devices.

The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the source policy.

84. An organization has a Cisco FTD that uses bridge groups to pass traffic from the inside interfaces to the outside interfaces. They are unable to gather information about neighbouring Cisco devices or use multicast in their environment.

What must be done to resolve this issue?

Create a firewall rule to allow CDP traffic.

Create a bridge group with the firewall interfaces.

Change the firewall mode to routed.

Change the firewall mode to transparent.

85. An organization has a compliancy requirement to protect servers from clients, however, the clients and servers all reside on the same Layer 3 network Without readdressing IP subnets for clients or servers, how is segmentation achieved?

Deploy a firewall in transparent mode between the clients and servers.

Change the IP addresses of the clients, while remaining on the same subnet.

Deploy a firewall in routed mode between the clients and servers

Change the IP addresses of the servers, while remaining on the same subnet

86. In which two places can thresholding settings be configured? (Choose two.)

on each IPS rule

globally, within the network analysis policy

globally, per intrusion policy

on each access control rule

per preprocessor, within the network analysis policy

87. An administrator is attempting to add a Cisco Secure Firewall Threat Defence device to Cisco Secure Firewall Management Center with a password of Cisco0480846211 480846211. The private IP address of the FMC server is 192.168.75.201.

Which command must be used in order to accomplish this task?

configure manager add 192.168.75.201/24

configure manager add 192.16875.201

configure manager add 192.168.45.45

configure manager add 192.168.75.201 255.255.255.0

88. Which interface type allows packets to be dropped?

passive

inline

ERSPAN

TAP

89. An organization is migrating their Cisco ASA devices running in multicontext mode to Cisco FTD devices.

Which action must be taken to ensure that each context on the Cisco ASA is logically separated in the Cisco FTD devices?

Add a native instance to distribute traffic to each Cisco FTD context.

Add the Cisco FTD device to the Cisco ASA port channels.

Configure a container instance in the Cisco FTD for each context in the Cisco AS

Configure the Cisco FTD to use port channels spanning multiple networks.

90. An engineer must configure the firewall to monitor traffic within a single subnet without increasing the hop count of that traffic.

How would the engineer achieve this?

Configure Cisco Firepower as a transparent firewall

Set up Cisco Firepower as managed by Cisco FDM

Configure Cisco Firepower in FXOS monitor only mode.

Set up Cisco Firepower in intrusion prevention mode

Page 10 of 10

91. A security engineer is configuring an Access Control Policy for multiple branch locations These locations share a common rule set and utilize a network object called INSIDE_NET which contains the locally significant internal network subnets at each location.

What technique will retain the policy consistency at each location but allow only the locally significant network subnet within the applicable rules?

utilizing policy inheritance

utilizing a dynamic ACP that updates from Cisco Talos

creating a unique ACP per device

creating an ACP with an INSIDE_NET network object and object overrides

92. An engineer is configuring two new Cisco FTD devices to replace the existing high availability firewall pair in a highly secure environment. The information exchanged between the FTD devices over the failover link must be encrypted.

Which protocol supports this on the Cisco FTD?

IPsec

SSH

SSL

MACsec

93. There is an increased amount of traffic on the network and for compliance reasons, management needs visibility into the encrypted traffic.

What is a result of enabling TLS'SSL decryption to allow this visibility?

It prompts the need for a corporate managed certificate

It has minimal performance impact

It is not subject to any Privacy regulations

It will fail if certificate pinning is not enforced

94. DRAG DROP

Drag and drop the steps to restore an automatic device registration failure on the standby Cisco FMC from the left into the correct order on the right. Not all options are used.

95. An engineer must configure a Cisco FMC dashboard in a child domain.

Which action must be taken so that the dashboard is visible to the parent domain?

Add a separate tab.

Adjust policy inheritance settings.

Add a separate widget.

Create a copy of the dashboard.

96. A security engineer must create a malware and file policy on a Cisco Secure Firewall Threat Defense device. The solution must ensure that PDF. DOCX, and XLSX files are not sent to Cisco Secure Malware analytics.

What must do configured to meet the requirements''

capacity handling

Spero analysis

dynamic analysis

local malware analysis

97. A network engineer is extending a user segment through an FTD device for traffic inspection without creating another IP subnet.

How is this accomplished on an FTD device in routed mode?

by leveraging the ARP to direct traffic through the firewall

by assigning an inline set interface

by using a BVI and create a BVI IP address in the same subnet as the user segment

by bypassing protocol inspection by leveraging pre-filter rules

98. Network users are experiencing Intermittent issues with internet access. An engineer ident med mat the issue Is being caused by NAT exhaustion.

How must the engineer change the dynamic NAT configuration to provide internet access for more users without running out of resources?

Define an additional static NAT for the network object in use.

Configure fallthrough to interface PAT on 'he Advanced tab.

Convert the dynamic auto NAT rule to dynamic manual NA

Add an identity NAT rule to handle the overflow of users.

TAGS:

300-710, 300-710 exam dumps

Notify of

Label

Name*

Email*

Website

Label

Name*

Email*

Website

0 Comments

Oldest

Newest Most Voted

Inline Feedbacks

View all comments

Get 300-710 Dumps Full Version

Q&As: 330
Versions: PDF and Software Download Now

About Dumpsinfo

Dumpsinfo is a good platform providing the latest exam information and dumps questions for all IT certification exams. You can study all the latest exam dumps questions online.

[email protected]

Mon - Sat 9:00am - 6:00pm

300-710 Dumps Questions – Effective Way to Get Certified

Related

Posts

100-160 Dumps Guarantee You Pass 100-160 Exam Easily

Pass 300-815 Exam to Get Cisco Certification

Test Online 300-445 Dumps Questions to Be Certified

Improve Your Knowledge with 300-540 Exam Dumps

About Us

EMAIL

Services

Opening Hours