Which two conditions are necessary for high availability to function between two Cisco FTD devices?(Choose two.)

The units must be the same version

The units must be the same model.

The units must be the same version

Both devices can be part of a different group that must be in the same domain when configured within the FMC.

The units must be different models if they are part of the same series.

The units must be configured only for firewall routed mode.

The units must be the same model.

What are the minimum requirements to deploy a managed device inline?

inline interfaces, MTU, and mode

inline interfaces, security zones, MTU, and mode

passive interface, MTU, and mode

inline interfaces, MTU, and mode

passive interface, security zone, MTU, and mode

What is the difference between inline and inline tap on Cisco Firepower?

Inline tap mode can send a copy of the traffic to another device.

Inline tap mode does full packet capture.

Inline mode cannot do SSL decryption.

Inline mode can drop malicious traffic.

Which two deployment types support high availability? (Choose two.)

virtual appliance in public cloud

Which policy rule is included in the deployment of a local DMZ during the initial deployment of a Cisco NGFW through the Cisco FMC GUI?

a default DMZ policy for which only a user can change the IP addresses.

An engineer is tasked with deploying an internal perimeter firewall that will support multiple DMZs Each DMZ has a unique private IP subnet range. How is this requirement satisfied?

Deploy the firewall in routed mode with NAT configured.

Deploy the firewall in transparent mode with access control policies.

Deploy the firewall in routed mode with access control policies.

Deploy the firewall in routed mode with NAT configured.

Deploy the firewall in transparent mode with NAT configured.

An organization has a Cisco FTD that uses bridge groups to pass traffic from the inside interfaces to the outside interfaces. They are unable to gather information about neighbouring Cisco devices or use multicast in their environment. What must be done to resolve this issue?

Change the firewall mode to transparent.

Create a firewall rule to allow CDP traffic.

Create a bridge group with the firewall interfaces.

Change the firewall mode to transparent.

Change the firewall mode to routed.

A network engineer implements a new Cisco Firepower device on the network to take advantage of its intrusion detection functionality. There is a requirement to analyze the traffic going across the device, alert on any malicious traffic, and appear as a bump in the wire How should this be implemented?

Configure a bridge group in transparent mode.

Specify the BVl IP address as the default gateway for connected devices.

Enable routing on the Cisco Firepower

Add an IP address to the physical Cisco Firepower interfaces.

Configure a bridge group in transparent mode.

An engineer is building a new access control policy using Cisco FMC. The policy must inspect a unique IPS policy as well as log rule matching. Which action must be taken to meet these requirements?

Configure an IPS policy and enable global logging.

Configure an IPS policy and enable per-rule logging.

Disable the default IPS policy and enable global logging.

Configure an IPS policy and enable global logging.

Disable the default IPS policy and enable per-rule logging.

Within an organization's high availability environment where both firewalls are passing traffic, traffic must be segmented based on which department it is destined for. Each department is situated on a different LAN. What must be configured to meet these requirements?

high availability active/standby firewalls

A network security engineer must replace a faulty Cisco FTD device in a high availability pair. Which action must be taken while replacing the faulty unit?

Unregister the faulty Cisco FTD device from the Cisco FMC

Shut down the Cisco FMC before powering up the replacement unit.

Ensure that the faulty Cisco FTD device remains registered to the Cisco FMC.

Unregister the faulty Cisco FTD device from the Cisco FMC

Shut down the active Cisco FTD device before powering up the replacement unit.

An organization is migrating their Cisco ASA devices running in multicontext mode to Cisco FTD devices. Which action must be taken to ensure that each context on the Cisco ASA is logically separated in the Cisco FTD devices?

Configure a container instance in the Cisco FTD for each context in the Cisco ASA.

Add a native instance to distribute traffic to each Cisco FTD context.

Add the Cisco FTD device to the Cisco ASA port channels.

Configure a container instance in the Cisco FTD for each context in the Cisco ASA.

Configure the Cisco FTD to use port channels spanning multiple networks.

Which firewall design allows a firewall to forward traffic at layer 2 and layer 3 for the same subnet?

Cisco Firepower Threat Defense mode

Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD? (Choose two.)

MD5 authentication to OSPF packets

SHA authentication to OSPF packets

area boundary router type 1 LSA filtering

MD5 authentication to OSPF packets

When creating a report template, how can the results be limited to show only the activity of a specific subnet?

Add an Input Parameter in the Advanced Settings of the report, and set the type to Network/IP.

Create a custom search in Firepower Management Center and select it in each section of the report.

Add an Input Parameter in the Advanced Settings of the report, and set the type to Network/IP.

Add a Table View section to the report with the Search field defined as the network in CIDR format.

Select IP Address as the X-Axis in each section of the report.

What is the disadvantage of setting up a site-to-site VPN in a clustered-units environment?

VPN connections must be re-established when a new master unit is elected.

VPN connections can be re-established only if the failed master unit recovers.

Smart License is required to maintain VPN connections simultaneously across all cluster units.

VPN connections must be re-established when a new master unit is elected.

Only established VPN connections are maintained when a new master unit is elected.

Which two statements about bridge-group interfaces in Cisco FTD are true? (Choose two.)

Bridge groups are supported in both transparent and routed firewall modes.

Each directly connected network must be on the same subnet.

The BVI IP address must be in a separate subnet from the connected network.

Bridge groups are supported in both transparent and routed firewall modes.

Bridge groups are supported only in transparent firewall mode.

Bidirectional Forwarding Detection echo packets are allowed through the FTD when using bridgegroup members.

Each directly connected network must be on the same subnet.

Which command is run on an FTD unit to associate the unit to an FMC manager that is at IP address 10.0.0.10, and that has the registration key Cisco123?

configure manager add 10.0.0.10 Cisco123

configure manager local 10.0.0.10 Cisco123

configure manager add Cisco123 10.0.0.10

configure manager local Cisco123 10.0.0.10

configure manager add 10.0.0.10 Cisco123

Which two routing options are valid with Cisco Firepower Threat Defense? (Choose two.)

ECMP with up to three equal cost paths across a single interface

ECMP with up to three equal cost paths across multiple interfaces

ECMP with up to three equal cost paths across a single interface

BGPv4 in transparent firewall mode

What is the result of specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?

Matching traffic is not rate limited.

The rate-limiting rule is disabled.

Matching traffic is not rate limited.

The system rate-limits all traffic.

The system repeatedly generates warnings.

In which two places can thresholding settings be configured? (Choose two.)

globally, within the network analysis policy

per preprocessor, within the network analysis policy

In which two ways do access control policies operate on a Cisco Firepower system? (Choose two.)

Traffic inspection can be interrupted temporarily when configuration changes are deployed.

They can block traffic based on Security Intelligence data.

Traffic inspection can be interrupted temporarily when configuration changes are deployed.

The system performs intrusion inspection followed by file inspection.

They can block traffic based on Security Intelligence data.

File policies use an associated variable set to perform intrusion prevention.

The system performs a preliminary inspection on trusted traffic to validate that it matches the trusted parameters.

Cisco 300-710 Practice Test 1 - Free Online Exam Prep & Questions

Question 1 / 40

What is a result of enabling Cisco FTD clustering?

For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections.

Integrated Routing and Bridging is supported on the master unit.

Site-to-site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails.

All Firepower appliances can support Cisco FTD clustering.

Comment (0)

Cisco 300-710 Practice Test 1

Question

Cisco 300-710 Practice Tests

Practice Tests