Authentic Best resources for 300-710 Test Engine Practice Exam
[2023] 300-710 PDF Questions - Perfect Prospect To Go With Dumpexams Practice Exam
Domain #2. Configuration
The next 30% of the syllabus is based on the configuration principles. In this section, a detailed understanding of setting up system settings in the Cisco Firepower Management Center can be gained. When mastering this module is in progress, obtaining skills related to accessing control, intrusion, malware, DNS, identity, SSL, prefilter, and network discovery is required. Besides, this section explains the concepts like application detector, correlation, actions, and object management. Intrusion rules, device management, NAT, VPN, QoS, certificates, and platform setting are other covered topics.
NEW QUESTION 52
A security engineer is configuring an Access Control Policy for multiple branch locations. These locations share a common rule set and utilize a network object called INSIDE_NET which contains the locally significant internal network subnets at each location. What technique will retain the policy consistency at each location but allow only the locally significant network subnet within the application rules?
- A. utilizing policy inheritance
- B. creating a unique ACP per device
- C. creating an ACP with an INSIDE_NET network object and object overrides
- D. utilizing a dynamic ACP that updates from Cisco Talos
Answer: C
Explanation:
Section: Configuration
NEW QUESTION 53
What is a feature of Cisco AMP private cloud?
- A. It supports security intelligence filtering.
- B. It disables direct connections to the public cloud.
- C. It performs dynamic analysis
- D. It supports anonymized retrieval of threat intelligence
Answer: B
NEW QUESTION 54
A user within an organization opened a malicious file on a workstation which in turn caused a ransomware attack on the network. What should be configured within the Cisco FMC to ensure the file is tested for viruses on a sandbox system?
- A. Local malware analysis
- B. Spere analysis
- C. Capacity handling
- D. Dynamic analysis
Answer: D
NEW QUESTION 55
Which command is run at the CLI when logged in to an FTD unit, to determine whether the unit is managed locally or by a remote FMC server?
- A. system generate-troubleshoot
- B. show running-config | include manager
- C. show configuration session
- D. show managers
Answer: D
Explanation:
Section: Management and Troubleshooting
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/command_ref/ b_Command_Reference_for_Firepower_Threat_Defense/c_3.html
NEW QUESTION 56
Refer to the exhibit.
An engineer is modifying an access control policy to add a rule to Inspect all DNS traffic that passes it making the change and deploying the policy, they see that DNS traffic Is not being Inspected by the Snort engine. What is......
- A. The rule must specify the security zone that originates the traffic.
- B. The rule must define the source network for inspection as well as the port.
- C. The action of the rule is set to trust instead of allow.
- D. The rule Is configured with the wrong setting for the source port.
Answer: C
NEW QUESTION 57
With Cisco FTD integrated routing and bridging, which interface does the bridge group use to communicate with a routed interface?
- A. bridge virtual
- B. subinterface
- C. switch virtual
- D. bridge group member
Answer: A
NEW QUESTION 58
Refer to the exhibit.
And engineer is analyzing the Attacks Risk Report and finds that there are over 300 instances of new operating systems being seen on the network How is the Firepower configuration updated to protect these new operating systems?
- A. The administrator requests a Remediation Recommendation Report from Cisco Firepower
- B. Cisco Firepower automatically updates the policies.
- C. The administrator manually updates the policies.
- D. Cisco Firepower gives recommendations to update the policies.
Answer: D
Explanation:
Explanation
Ref:
https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Tailori
NEW QUESTION 59
The event dashboard within the Cisco FMC has been inundated with low priority intrusion drop events, which are overshadowing high priority events. An engineer has been tasked with reviewing the policies and reducing the low priority events. Which action should be configured to accomplish this task?
- A. drop packet
- B. drop and generate
- C. generate events
- D. drop connection
Answer: C
Explanation:
Reference" https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/working_with_intrusion_events.html
NEW QUESTION 60
Refer to the exhibit.
And engineer is analyzing the Attacks Risk Report and finds that there are over 300 instances of new operating systems being seen on the network How is the Firepower configuration updated to protect these new operating systems?
- A. The administrator requests a Remediation Recommendation Report from Cisco Firepower
- B. Cisco Firepower automatically updates the policies.
- C. The administrator manually updates the policies.
- D. Cisco Firepower gives recommendations to update the policies.
Answer: D
Explanation:
Explanation
Ref:
https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Tailori
NEW QUESTION 61
The CEO ask a network administrator to present to management a dashboard that shows custom analysis tables for the top DNS queries URL category statistics, and the URL reputation statistics.
Which action must the administrator take to quickly produce this information for management?
- A. Run the Attack report and filter on DNS to show this information.
- B. Create a new dashboard and add three custom analysis widgets that specify the tables needed.
- C. Modify the Connection Events dashboard to display the information in a view for management.
- D. Copy the intrusion events dashboard tab and modify each widget to show the correct charts.
Answer: B
NEW QUESTION 62
What is a functionality of port objects in Cisco FMC?
- A. to represent all protocols in the same way
- B. to mix transport protocols when setting both source and destination port conditions in a rule
- C. to add any protocol other than TCP or UDP for source port conditions in access control rules.
- D. to represent protocols other than TCP, UDP, and ICMP
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/reusable_objects.html
NEW QUESTION 63
Remote users who connect via Cisco AnyConnect to the corporate network behind a Cisco FTD device report that they get no audio when calling between remote users using their softphones. These same users can call internal users on the corporate network without any issues. What is the cause of this issue?
- A. The hairpinning feature is not available on FTD.
- B. FTD has no NAT policy that allows outside to outside communication
- C. The Enable Spoke to Spoke Connectivity through Hub option is not selected on FTD.
- D. Split tunneling is enabled for the Remote Access VPN on FTD
Answer: A
NEW QUESTION 64
Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?
- A. configure coredump packet-engine enable
- B. capture WORD
- C. capture-traffic
- D. capture
Answer: C
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/command_ref/b_Command_Reference_for_Firepower_Threat_Defense/ac_1.html
NEW QUESTION 65
Which protocol establishes network redundancy in a switched Firepower device deployment?
- A. HSRP
- B. GLBP
- C. STP
- D. VRRP
Answer: C
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/firepower_threat_defense_high_availability.html
NEW QUESTION 66
A network engineer sets up a secondary Cisco FMC that is integrated with Cisco Security Packet Analyzer What occurs when the secondary Cisco FMC synchronizes with the primary Cisco FMC?
- A. The existing configuration for integration of the secondary Cisco FMC the Cisco Security Packet Analyzer is overwritten.
- B. The synchronization between the primary and secondary Cisco FMC fails
- C. The secondary Cisco FMC must be reintegrated with the Cisco Security Packet Analyzer after the synchronization
- D. The existing integration configuration is replicated to the primary Cisco FMC
Answer: A
NEW QUESTION 67
An engineer is attempting to add a new FTD device to their FMC behind a NAT device with a NAT ID of ACME001 and a password of Cisco388267669. Which command set must be used in order to accomplish this?
- A. configure manager add ACME001 <registration key> <FMC IP>
- B. configure manager add <FMC IP> registration key> ACME001
- C. configure manager add <FMC IP> ACME0O1 <registration key>
- D. configure manager add DONTRESOLVE <FMC IP> AMCE001 <registration key>
Answer: B
NEW QUESTION 68
An engineer attempts to pull the configuration for a Cisco FTD sensor to review with Cisco TAC but does not have direct access to the CU for the device. The CLl for the device is managed by Cisco FMC to which the engineer has access. Which action in Cisco FMC grants access to the CLl for the device?
- A. Export the configuration using the Import/Export tool within Cisco FMC.
- B. Use the show run all command in the Cisco FTD CLI feature within Cisco FMC.
- C. Create a backup of the configuration within the Cisco FMC.
- D. Download the configuration file within the File Download section of Cisco FMC.
Answer: A
NEW QUESTION 69
Which two conditions must be met to enable high availability between two Cisco FTD devices? (Choose two.)
- A. same NTP configuration
- B. same number of interfaces
- C. same DHCP/PPoE configuration
- D. same flash memory size
- E. same host name
Answer: A,B
Explanation:
https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/212699-configure-ftd-high-availability-on-firep.html Conditions In order to create an HA between 2 FTD devices, these conditions must be met:
Same model
Same version (this applies to FXOS and to FTD - (major (first number), minor (second number), and maintenance (third number) must be equal)) Same number of interfaces Same type of interfaces Both devices as part of same group/domain in FMC Have identical Network Time Protocol (NTP) configuration Be fully deployed on the FMC without uncommitted changes Be in the same firewall mode: routed or transparent.
Note that this must be checked on both FTD devices and FMC GUI since there have been cases where the FTDs had the same mode, but FMC does not reflect this.
Does not have DHCP/Point-to-Point Protocol over Ethernet (PPPoE) configured in any of the interface Different hostname (Fully Qualified Domain Name (FQDN)) for both chassis. In order to check the chassis hostname navigate to FTD CLI and run this command
NEW QUESTION 70
Which license type is required on Cisco ISE to integrate with Cisco FMC pxGrid?
- A. apex
- B. plus
- C. base
- D. mobility
Answer: B
NEW QUESTION 71
In which two places are thresholding settings configured? (Choose two.)
- A. globally, per intrusion policy
- B. on each IPS rule
- C. on each access control rule
- D. globally, within the network analysis policy
- E. per preprocessor, within the network analysis policy
Answer: A,B
Explanation:
Section: Configuration
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa- firepower-module-user-guide-v541/Intrusion-Global-Threshold.pdf
NEW QUESTION 72
With a recent summer time change, system logs are showing activity that occurred to be an hour behind real time Which action should be taken to resolve this issue?
- A. Configure the system clock settings to use NTP
- B. Manually adjust the time to the correct hour on all managed devices
- C. Configure the system clock settings to use NTP with Daylight Savings checked
- D. Manually adjust the time to the correct hour on the Cisco FMC.
Answer: C
NEW QUESTION 73
Which command must be run to generate troubleshooting files on an FTD?
- A. show tech-support
- B. system generate-troubleshoot all
- C. system support view-files
- D. sudo sf_troubleshoot.pl
Answer: D
Explanation:
Section: Management and Troubleshooting
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/sourcefire-defense-center/117663-technote- SourceFire-00.html
NEW QUESTION 74
An organization has noticed that malware was downloaded from a website that does not currently have a known bad reputation. How will this issue be addresses globally in the quickest way possible and with the least amount of impact?
- A. by denying outbound web access
- B. by creating a URL object in the policy to block the website
- C. Cisco Talos will automatically update the policies.
- D. by Isolating the endpoint
Answer: B
NEW QUESTION 75
What is the result of specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?
- A. Matching traffic is not rate limited.
- B. The rate-limiting rule is disabled.
- C. The system rate-limits all traffic.
- D. The system repeatedly generates warnings.
Answer: A
NEW QUESTION 76
An engineer is working on a LAN switch and has noticed that its network connection to the mime Cisco IPS has gone down Upon troubleshooting it is determined that the switch is working as expected What must have been implemented for this failure to occur?
- A. The Cisco IPS is configured in detection mode
- B. The Cisco IPS has been configured to be in fail-open mode
- C. Link-state propagation is enabled
- D. The upstream router has a misconfigured routing protocol
Answer: A
NEW QUESTION 77
......
In Conclusion
Going for the Cisco 300-710 exam is an important step for those with a desire to advance in the field of security. With its associated certificates, this test brings numerous career opportunities and increases chances to succeed. Start your preparation with the above learning resources now and get ready for professional enhancement.
Knowing the Associated Certifications
Cisco 300-710 is the gold standard of security tests and allows candidates to reap multiple benefits. As far as the associated certification is concerned, success in this exam leads to obtaining two of them. The first one is CCNP Security. It is a professional-level certificate helping any individual to prove their skills in fabricating real-time security solutions. To earn it, candidates have to first ace 350-701 test and then aim at Cisco 300-710 as this is a viable concentration exam choice.
When 300-710 is passed alone, it will lead to acquiring the Cisco Certified Specialist – Network Security Firepower accreditation. It is an intermediate certificate trying to impart established learning related to Cisco Firepower 7000 and 8000 series as well as Firepower Threat Defense.
Best updated resource for 300-710 Online Practice Exam: https://pdftorrent.dumpexams.com/300-710-vce-torrent.html