An organization is setting up two new Cisco FTD devices to replace their current firewalls and cannot have any network downtime During the setup process, the synchronization between the two devices is failing What action is needed to resolve this issue?

Confirm that both devices are running the same software version

Confirm that both devices have the same port-channel numbering

Confirm that both devices are running the same software version

Confirm that both devices are configured with the same types of interfaces

Confirm that both devices have the same flash memory sizes

A network engineer wants to add a third-party threat feed into the Cisco FMC for enhanced threat detection Which action should be taken to accomplish this goal?

Enable Threat Intelligence Director using STIX and TAXII

Enable Rapid Threat Containment using REST APIs

Enable Threat Intelligence Director using REST APIs

Enable Rapid Threat Containment using STIX and TAXII

A Cisco FTD device is running in transparent firewall mode with a VTEP bridge group member ingress interface What must be considered by an engineer tasked with specifying a destination MAC address for a packet trace?

The destination MAC address is optional if a VLAN ID value is entered

Only the UDP packet type is supported

The output format option for the packet logs unavailable

The VLAN ID and destination MAC address are optional

An organization has a compliancy requirement to protect servers from clients, however, the clients and servers all reside on the same Layer 3 network Without readdressing IP subnets for clients or servers, how is segmentation achieved?

Deploy a firewall in transparent mode between the clients and servers.

Change the IP addresses of the clients, while remaining on the same subnet.

Deploy a firewall in routed mode between the clients and servers

Change the IP addresses of the servers, while remaining on the same subnet

A network administrator notices that SI events are not being updated The Cisco FTD device is unable to load all of the SI event entries and traffic is not being blocked as expected. What must be done to correct this issue?

Redeploy configurations to affected devices so that additional memory is allocated to the SI module

Restart the affected devices in order to reset the configurations

Manually update the SI event entries to that the appropriate traffic is blocked

Replace the affected devices with devices that provide more memory

Redeploy configurations to affected devices so that additional memory is allocated to the SI module

A hospital network needs to upgrade their Cisco FMC managed devices and needs to ensure that a disaster recovery process is in place. What must be done in order to minimize downtime on the network?

Keep a copy of the current configuration to use as backup

Configure a second circuit to an ISP for added redundancy

Keep a copy of the current configuration to use as backup

Configure the Cisco FMCs for failover

Configure the Cisco FMC managed devices for clustering.

In a multi-tennent deployment where multiple domains are in use. which update should be applied outside of the Global Domain?

local import of intrusion rules

What is a feature of Cisco AMP private cloud?

It disables direct connections to the public cloud.

It supports anonymized retrieval of threat intelligence

It supports security intelligence filtering.

It disables direct connections to the public cloud.

A mid-sized company is experiencing higher network bandwidth utilization due to a recent acquisition The network operations team is asked to scale up their one Cisco FTD appliance deployment to higher capacities due to the increased network bandwidth. Which design option should be used to accomplish this goal?

Deploy multiple Cisco FTD appliances in firewall clustering mode to increase performance.

Deploy multiple Cisco FTD appliances using VPN load-balancing to scale performance.

Deploy multiple Cisco FTD HA pairs to increase performance

Deploy multiple Cisco FTD HA pairs in clustering mode to increase performance

An organization has seen a lot of traffic congestion on their links going out to the internet There is a Cisco Firepower device that processes all of the traffic going to the internet prior to leaving the enterprise. How is the congestion alleviated so that legitimate business traffic reaches the destination?

Create a QoS policy rate-limiting high bandwidth applications

Create a flexconfig policy to use WCCP for application aware bandwidth limiting

Create a VPN policy so that direct tunnels are established to the business applications

Create a NAT policy so that the Cisco Firepower device does not have to translate as many addresses

Create a QoS policy rate-limiting high bandwidth applications

With a recent summer time change, system logs are showing activity that occurred to be an hour behind real time Which action should be taken to resolve this issue?

Configure the system clock settings to use NTP with Daylight Savings checked

Manually adjust the time to the correct hour on all managed devices

Configure the system clock settings to use NTP with Daylight Savings checked

Manually adjust the time to the correct hour on the Cisco FMC.

Configure the system clock settings to use NTP

What is a characteristic of bridge groups on a Cisco FTD?

In routed firewall mode, routing between bridge groups is supported.

In routed firewall mode, routing between bridge groups must pass through a routed interface.

In routed firewall mode, routing between bridge groups is supported.

In transparent firewall mode, routing between bridge groups is supported

Routing between bridge groups is achieved only with a router-on-a-stick configuration on a connected router

An engineer has been tasked with using Cisco FMC to determine if files being sent through the network are malware. Which two configuration tasks must be performed to achieve this file lookup?(Choose two).

The Cisco FMC needs to connect to the Cisco AMP for Endpoints service.

The Cisco FMC needs to include a file inspection policy for malware lookup.

The Cisco FMC needs to include a SSL decryption policy.

The Cisco FMC needs to connect to the Cisco AMP for Endpoints service.

The Cisco FMC needs to connect to the Cisco ThreatGrid service directly for sandboxing.

The Cisco FMC needs to connect with the FireAMP Cloud.

The Cisco FMC needs to include a file inspection policy for malware lookup.

An engineer configures an access control rule that deploys file policy configurations to security zones or tunnel zones, and it causes the device to restart. What is the reason for the restart?

Source or destination security zones in the access control rule matches the security zones that are associated with interfaces on the target devices.

The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the destination policy.

Source or destination security zones in the source tunnel zone do not match the security zones that are associated with interfaces on the target devices.

The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the source policy.

An engineer has been tasked with using Cisco FMC to determine if files being sent through the network are malware. Which two configuration takes must be performed to achieve this file lookup?(Choose two.)

The Cisco FMC needs to connect with the FireAMP Cloud.

The Cisco FMC needs to include a file inspection policy for malware lookup.

The Cisco FMC needs to include a SSL decryption policy.

The Cisco FMC needs to connect to the Cisco AMP for Endpoints service.

The Cisco FMC needs to connect to the Cisco ThreatGrid service directly for sandboxing.

The Cisco FMC needs to connect with the FireAMP Cloud.

The Cisco FMC needs to include a file inspection policy for malware lookup.

Which CLI command is used to control special handling of clientHello messages?

system support ssl-client-hello-reset

system support ssl-client-hello-tuning

system support ssl-client-hello-display

system support ssl-client-hello-force-reset

system support ssl-client-hello-reset

An engineer is restoring a Cisco FTD configuration from a remote backup using the command restore remote-manager-backup location 1.1.1.1 admin /volume/home/admin BACKUP_Cisc394602314.zip on a Cisco FMG. After connecting to the repository, an error occurred that prevents the FTD device from accepting the backup file. What is the problem?

The backup file extension was changed from tar to zip

The backup file is not in .cfg format.

The backup file is too large for the Cisco FTD device

The backup file extension was changed from tar to zip

The backup file was not enabled prior to being applied

An engineer has been tasked with providing disaster recovery for an organization's primary Cisco FMC. What must be done on the primary and secondary Cisco FMCs to ensure that a copy of the original corporate policy is available if the primary Cisco FMC fails?

Restore the primary Cisco FMC backup configuration to the secondary Cisco FMC device when the primary device fails.

Configure high-availability in both the primary and secondary Cisco FMCs.

Connect the primary and secondary Cisco FMC devices with Category 6 cables of not more than 10 meters in length.

Place the active Cisco FMC device on the same trusted management network as the standby device.

A network engineer is logged into the Cisco AMP for Endpoints console and sees a malicious verdict for an identified SHA-256 hash. Which configuration is needed to mitigate this threat?

Add the hash to the simple custom deletion list.

Use regular expressions to block the malicious file.

Enable a personal firewall in the infected endpoint.

Add the hash from the infected endpoint to the network block list.

An organization has a Cisco IPS running in inline mode and is inspecting traffic for malicious activity.When traffic is received by the Cisco IRS, if it is not dropped, how does the traffic get to its destination?

It is retransmitted from the Cisco IPS inline set.

The packets are duplicated and a copy is sent to the destination.

It is transmitted out of the Cisco IPS outside interface.

It is routed back to the Cisco ASA interfaces for transmission.

A network administrator is concerned about (he high number of malware files affecting users' machines. What must be done within the access control policy in Cisco FMC to address this concern?

Create a file policy and set the access control policy to block.

Create an intrusion policy and set the access control policy to block.

Create an intrusion policy and set the access control policy to allow.

Create a file policy and set the access control policy to allow.

Create a file policy and set the access control policy to block.

An engineer is investigating connectivity problems on Cisco Firepower that is using service group tags. Specific devices are not being tagged correctly, which is preventing clients from using the proper policies when going through the firewall How is this issue resolved?

Use a packet capture with match criteria.

Use traceroute with advanced options.

Use Wireshark with an IP subnet filter.

Use a packet capture with match criteria.

Use a packet sniffer with correct filtering

A connectivity issue is occurring between a client and a server which are communicating through a Cisco Firepower device While troubleshooting, a network administrator sees that traffic is reaching the server, but the client is not getting a response Which step must be taken to resolve this issue without initiating traffic from the client?

Use packet-tracer to validate that the packet passes through the firewall and is NATed to the corrected IP address.

Use packet-tracer to ensure that traffic is not being blocked by an access list.

Use packet capture to ensure that traffic is not being blocked by an access list.

Use packet capture to validate that the packet passes through the firewall and is NATed to the corrected IP address.

Use packet-tracer to validate that the packet passes through the firewall and is NATed to the corrected IP address.

An organization must be able to ingest NetFlow traffic from their Cisco FTD device to Cisco Stealthwatch for behavioral analysis. What must be configured on the Cisco FTD to meet this requirement?

interface object to export NetFlow

security intelligence object for NetFlow

variable set object for NetFlow

An engineer must build redundancy into the network and traffic must continuously flow if a redundant switch in front of the firewall goes down. What must be configured to accomplish this task?

vPC on the switches to the span EtherChannel on the firewall cluster

redundant interfaces on the firewall cluster mode and switches

redundant interfaces on the firewall noncluster mode and switches

vPC on the switches to the interface mode on the firewall duster

vPC on the switches to the span EtherChannel on the firewall cluster

What is the advantage of having Cisco Firepower devices send events to Cisco Threat Response via the security services exchange portal directly as opposed to using syslog?

An on-premises proxy server does not need to be set up and maintained.

All types of Cisco Firepower devices are supported.

An on-premises proxy server does not need to be set up and maintained.

Cisco Firepower devices do not need to be connected to the Internet.

Supports all devices that are running supported versions of Cisco Firepower.

A network administrator notices that inspection has been interrupted on all non-managed interfaces of a device. What is the cause of this?

The value of the highest MTU assigned to any non-management interface was changed.

The value of the highest MSS assigned to any non-management interface was changed.

A passive interface was associated with a security zone.

Multiple inline interface pairs were added to the same inline interface.

A network administrator is configuring Snort inspection policies and is seeing failed deployment messages in Cisco FMC. What information should the administrator generate for Cisco TAC to help troubleshoot?

A "troubleshoot" file for the device in question.

A "show tech" file for the device in question.

A "troubleshoot" file for the device in question.

A "troubleshoot" file for the Cisco FMC.

A "show tech" for the Cisco FMC.

A network administrator needs to create a policy on Cisco Firepower to fast-path traffic to avoid Layer 7 inspection. The rate at which traffic is inspected must be optimized. What must be done to achieve this goal?

Enable lhe FXOS for multi-instance.

Configure modular policy framework.

A network engineer is tasked with minimising traffic interruption during peak traffic limes. When the SNORT inspection engine is overwhelmed, what must be configured to alleviate this issue?

Enable Automatic Application Bypass.

Enable IPS inline link state propagation

Enable Pre-filter policies before the SNORT engine failure.

Set a Trust ALL access control policy.

Enable Automatic Application Bypass.

A VPN user is unable to conned lo web resources behind the Cisco FTD device terminating the connection. While troubleshooting, the network administrator determines that the DNS responses are not getting through the Cisco FTD What must be done to address this issue while still utilizing Snort IPS rules?

Modify the Snort rules to allow legitimate DNS traffic to the VPN users.

Uncheck the "Drop when Inline" box in the intrusion policy to allow the traffic.

Modify the Snort rules to allow legitimate DNS traffic to the VPN users.

Disable the intrusion rule threshes to optimize the Snort processing.

Decrypt the packet after the VPN flow so the DNS queries are not inspected

An analyst is investigating a potentially compromised endpoint within the network and pulls a host report for the endpoint in question to collect metrics and documentation. What information should be taken from this report for the investigation?

intrusion events, host connections, and user sessions

client applications by user, web applications, and user connections

number of attacked machines, sources of the attack, and traffic patterns

intrusion events, host connections, and user sessions

threat detections over time and application protocols transferring malware

A company wants a solution to aggregate the capacity of two Cisco FTD devices to make the best use of resources such as bandwidth and connections per second. Which order of steps must be taken across the Cisco FTDs with Cisco FMC to meet this requirement?

Add members to the Cisco FMC, configure Cisco FTD interfaces, create the cluster in Cisco FMC, and configure cluster members in Cisco FMC.

Configure the Cisco FTD interfaces, add members to FMC, configure cluster members in FMC, and create cluster in Cisco FMC.

Add members to Cisco FMC, configure Cisco FTD interfaces in Cisco FMC. configure cluster members in Cisco FMC, create cluster in Cisco FMC. and configure cluster members in Cisco FMC.

Configure the Cisco FTD interfaces and cluster members, add members to Cisco FMC. and create the cluster in Cisco FMC.

Add members to the Cisco FMC, configure Cisco FTD interfaces, create the cluster in Cisco FMC, and configure cluster members in Cisco FMC.

A network engineer is logged into the Cisco AMP for Endpoints console and sees a malicious verdict for an identified SHA-256 hash. Which configuration is needed to mitigate this threat?

Add the hash to the simple custom detection list.

Use regular expressions to block the malicious file.

Add the hash from the infected endpoint to the network block list.

Add the hash to the simple custom detection list.

Enable a personal firewall in the infected endpoint.

Cisco 300-710 Practice Test 4 - Free Online Exam Prep & Questions

Question 1 / 40

An engineer is monitoring network traffic from their sales and product development departments, which are on two separate networks What must be configured in order to maintain data privacy for both departments?

Use a dedicated IPS inline set for each department to maintain traffic separation

Use 802 1Q mime set Trunk interfaces with VLANs to maintain logical traffic separation

Use passive IDS ports for both departments

Use one pair of inline set in TAP mode for both departments

Comment (0)

Cisco 300-710 Practice Test 4

Question

Cisco 300-710 Practice Tests

Practice Tests