Refer to the exhibit. And engineer is analyzing the Attacks Risk Report and finds that there are over 300 instances of new operating systems being seen on the network How is the Firepower configuration updated to protect these new operating systems?

Cisco Firepower gives recommendations to update the policies.

Cisco Firepower automatically updates the policies.

The administrator requests a Remediation Recommendation Report from Cisco Firepower

Cisco Firepower gives recommendations to update the policies.

The administrator manually updates the policies.

A network engineer is extending a user segment through an FTD device for traffic inspection without creating another IP subnet How is this accomplished on an FTD device in routed mode?

by using a BVI and create a BVI IP address in the same subnet as the user segment

by leveraging the ARP to direct traffic through the firewall

by assigning an inline set interface

by using a BVI and create a BVI IP address in the same subnet as the user segment

by bypassing protocol inspection by leveraging pre-filter rules

An engineer is configuring a second Cisco FMC as a standby device but is unable to register with the active unit. What is causing this issue?

The code versions running on the Cisco FMC devices are different

The primary FMC currently has devices connected to it.

The code versions running on the Cisco FMC devices are different

The licensing purchased does not include high availability

There is only 10 Mbps of bandwidth between the two devices.

An engineer is setting up a new Firepower deployment and is looking at the default FMC policies to start the implementation During the initial trial phase, the organization wants to test some common Snort rules while still allowing the majority of network traffic to pass Which default policy should be used?

Balanced Security and Connectivity

An engineer currently has a Cisco FTD device registered to the Cisco FMC and is assigned the address of 10 10.50.12. The organization is upgrading the addressing schemes and there is a requirement to convert the addresses to a format that provides an adequate amount of addresses on the network What should the engineer do to ensure that the new addressing takes effect and can be used for the Cisco FTD to Cisco FMC connection?

Delete and reregister the device to Cisco FMC

Update the IP addresses from IFV4 to IPv6 without deleting the device from Cisco FMC

Format and reregister the device to Cisco FMC.

Cisco FMC does not support devices that use IPv4 IP addresses.

A security engineer is configuring an Access Control Policy for multiple branch locations These locations share a common rule set and utilize a network object called INSIDE_NET which contains the locally significant internal network subnets at each location What technique will retain the policy consistency at each location but allow only the locally significant network subnet within the applicable rules?

creating an ACP with an INSIDE_NET network object and object overrides

utilizing a dynamic ACP that updates from Cisco Talos

creating a unique ACP per device

creating an ACP with an INSIDE_NET network object and object overrides

An engineer is troubleshooting application failures through a FTD deployment. While using the FMC CLI. it has been determined that the traffic in question is not matching the desired policy. What should be done to correct this?

Use the system support firewall-engine-debug command to determine which rules the traffic matching and modify the rule accordingly

Use the system support application-identification-debug command to determine which rules the traffic matching and modify the rule accordingly

Use the system support firewall-engine-dump-user-f density-data command to change the policy and allow the application through the firewall.

Use the system support network-options command to fine tune the policy.

An administrator is attempting to remotely log into a switch in the data centre using SSH and is unable to connect. How does the administrator confirm that traffic is reaching the firewall?

by performing a packet capture on the firewall.

by running Wireshark on the administrator's PC

by performing a packet capture on the firewall.

by running a packet tracer on the firewall.

by attempting to access it from a different workstation.

What is the advantage of having Cisco Firepower devices send events to Cisco Threat response via the security services exchange portal directly as opposed to using syslog?

An on-premises proxy server does not need to set up and maintained

Firepower devices do not need to be connected to the internet.

All types of Firepower devices are supported.

Supports all devices that are running supported versions of Firepower

An on-premises proxy server does not need to set up and maintained

An organization has noticed that malware was downloaded from a website that does not currently have a known bad reputation. How will this issue be addresses globally in the quickest way possible and with the least amount of impact?

by creating a URL object in the policy to block the website

Cisco Talos will automatically update the policies.

by creating a URL object in the policy to block the website

Which two routing options are valid with Cisco FTD? (Choose Two)

ECMP with up to three equal cost paths across a single interface

ECMP with up to three equal cost paths across multiple interfaces

ECMP with up to three equal cost paths across a single interface

BGPv4 in transparent firewall mode

Which two considerations must be made when deleting and re-adding devices while managing them via Cisco FMC (Choose two).

The Cisco FMC web interface prompts users to re-apply access control policies.

There is no option to re-apply NAT and VPN policies during registration is available, so users need to re-apply the policies after registration is completed.

Before re-adding the device In Cisco FMC, the manager must be added back.

The Cisco FMC web interface prompts users to re-apply access control policies.

Once a device has been deleted, It must be reconfigured before it is re-added to the Cisco FMC.

An option to re-apply NAT and VPN policies during registration is available, so users do not need to re-apply the polices after registration is completed.

There is no option to re-apply NAT and VPN policies during registration is available, so users need to re-apply the policies after registration is completed.

Refer to the exhibit. An administrator is looking at some of the reporting capabilities for Cisco Firepower and noticed this section of the Network Risk report showing a lot of SSL activity that cloud be used for evasion. Which action will mitigate this risk?

Use SSL decryption to analyze the packets.

Use encrypted traffic analytics to detect attacks

Use Cisco AMP for Endpoints to block all SSL connection

Use Cisco Tetration to track SSL connections to servers.

An engineer is attempting to add a new FTD device to their FMC behind a NAT device with a NAT ID of ACME001 and a password of Cisco388267669. Which command set must be used in order to accomplish this?

configure manager add <FMC IP> registration key> ACME001

configure manager add ACME001 <registration key> <FMC IP>

configure manager add <FMC IP> ACME0O1 <registration key>

configure manager add DONTRESOLVE <FMC IP> AMCE001 <registration key>

configure manager add <FMC IP> registration key> ACME001

Refer to the exhibit. What must be done to fix access to this website while preventing the same communication to all other websites?

Create an access control policy rule to allow port 80 to only 172.1.1 50.

Create an intrusion policy rule to have Snort allow port 80 to only 172.1.1 50.

Create an access control policy rule to allow port 80 to only 172.1.1 50.

Create an intrusion policy rule to have Snort allow port 443 to only 172.1.1.50

Create an access control policy rule to allow port 443 to only 172.1.1 50

Administrator is configuring SNORT inspection policies and is seeing failed deployment messages in Cisco FMC . What information should the administrator generate for Cisco TAC to help troubleshoot?

A Troubleshoot" file for the device in question.

A "show tech" file for the device in question

A "show tech" for the Cisco FMC.

A "troubleshoot" file for the Cisco FMC

Network traffic coining from an organization's CEO must never be denied. Which access control policy configuration option should be used if the deployment engineer is not permitted to create a rule to allow all traffic?

Configure a trust policy for the CEO.

Change the intrusion policy from security to balance.

Configure a trust policy for the CEO.

Create a NAT policy just for the CEO.

An organization wants to secure traffic from their branch office to the headquarter building using Cisco Firepower devices, They want to ensure that their Cisco Firepower devices are not wasting resources on inspecting the VPN traffic.What must be done to meet these requirements?

Configure the Cisco Firepower devices to bypass the access control policies for VPN traffic.

Configure the Cisco Firepower devices to ignore the VPN traffic using prefilter policies

Enable a flexconfig policy to re-classify VPN traffic so that it no longer appears as interesting traffic

Configure the Cisco Firepower devices to bypass the access control policies for VPN traffic.

Tune the intrusion policies in order to allow the VPN traffic through without inspection

An organization has implemented Cisco Firepower without IPS capabilities and now wants to enable inspection for their traffic. They need to be able to detect protocol anomalies and utilize the Snort rule sets to detect malicious behaviour.How is this accomplished?

Modify the intrusion policy to determine the minimum severity of an event to inspect.

Modify the access control policy to redirect interesting traffic to the engine

Modify the network discovery policy to detect new hosts to inspect

Modify the network analysis policy to process the packets for inspection

Modify the intrusion policy to determine the minimum severity of an event to inspect.

Refer to the exhibit. An organization has an access control rule with the intention of sending all social media traffic for inspection After using the rule for some time, the administrator notices that the traffic is not being inspected, but is being automatically allowed What must be done to address this issue?

Modify the selected application within the rule

Change the intrusion policy to connectivity over security.

Modify the rule action from trust to allow

Add the social network URLs to the block list

An administrator is setting up Cisco Firepower to send data to the Cisco Stealthwatch appliances. The NetFlow_Set_Parameters object is already created, but NetFlow is not being sent to the flow collector. What must be done to prevent this from occurring?

Create a Security Intelligence object to send the data to Cisco Stealthwatch

Add the NetFlow_Send_Destination object to the configuration

Create a Security Intelligence object to send the data to Cisco Stealthwatch

Create a service identifier to enable the NetFlow service

Add the NetFlow_Add_Destination object to the configuration

There is an increased amount of traffic on the network and for compliance reasons, management needs visibility into the encrypted traffic What is a result of enabling TLS'SSL decryption to allow this visibility?

It prompts the need for a corporate managed certificate

It has minimal performance impact

It is not subject to any Privacy regulations

It will fail if certificate pinning is not enforced

A network engineer is receiving reports of users randomly getting disconnected from their corporate applications which traverses the data center FTD appliance Network monitoring tools show that the FTD appliance utilization is peaking above 90% of total capacity. What must be done in order to further analyze this issue?

Use the Packet Capture feature to collect real-time network traffic

Use the Packet Export feature to save data onto external drives

Use the Packet Capture feature to collect real-time network traffic

Use the Packet Tracer feature for traffic policy analysis

Use the Packet Analysis feature for capturing network data

An engineer has been tasked with providing disaster recovery for an organization's primary Cisco FMC. What must be done on the primary and secondary Cisco FMCs to ensure that a copy of the original corporate policy is available if the primary Cisco FMC fails?

Restore the primary Cisco FMC backup configuration to the secondary Cisco FMC device when the primary device fails

Configure high-availability in both the primary and secondary Cisco FMCs

Connect the primary and secondary Cisco FMC devices with Category 6 cables of not more than 10 meters in length.

Place the active Cisco FMC device on the same trusted management network as the standby device

Restore the primary Cisco FMC backup configuration to the secondary Cisco FMC device when the primary device fails

Cisco 300-710 Practice Test 3 - Free Online Exam Prep & Questions

In a Cisco AMP for Networks deployment, which disposition is returned if the cloud cannot be reached?

Become a Premium Member for full access

Unlock Premium Member

Cisco 300-710 Practice Test 3

Question

Cisco 300-710 Practice Tests

Practice Tests