An organization has a Cisco FTD that uses bridge groups to pass traffic from the inside interfaces to the outside interfaces. They are unable to gather information about neighbouring Cisco devices or use multicast in their environment. What must be done to resolve this issue?

Change the firewall mode to routed.

Create a firewall rule to allow CDP traffic.

Create a bridge group with the firewall interfaces.

Change the firewall mode to routed.

Change the firewall mode to transparent.

An administrator is adding a new URL-based category feed to the Cisco FMC for use within the policies. The intelligence source does not use STIX. but instead uses a .txt file format. Which action ensures that regular updates are provided?

Add a URL source and select the flat file type within Cisco FMC.

Upload the .txt file and configure automatic updates using the embedded URL.

Add a TAXII feed source and input the URL for the feed.

Convert the .txt file to STIX and upload it to the Cisco FMC.

A Cisco FTD device is running in transparent firewall mode with a VTEP bridge group member ingress interface. What must be considered by an engineer tasked with specifying a destination MAC address for a packet trace?

The destination MAC address is optional if a VLAN ID value is entered.

Only the UDP packet type is supported.

The output format option for the packet logs is unavailable.

The destination MAC address is optional if a VLAN ID value is entered.

The VLAN ID and destination MAC address are optional.

An engineer is reviewing a ticket that requests to allow traffic for some devices that must connect to a server over 8699/udp. The request mentions only one IP address, 172.16.18.15, but the requestor asked for the engineer to open the port for all machines that have been trying to connect to it over the last week. Which action must the engineer take to troubleshoot this issue?

Filter the connection events by the destination port 8699/udp.

Use the context explorer to see the application blocks by protocol.

Use the context explorer to see the destination port blocks

Filter the connection events by the source port 8699/udp.

Filter the connection events by the destination port 8699/udp.

A security engineer is configuring a remote Cisco FTD that has limited resources and internet bandwidth. Which malware action and protection option should be configured to reduce the requirement for cloud lookups?

Block Malware action and local malware analysis

Malware Cloud Lookup and dynamic analysis

Block Malware action and dynamic analysis

Block Malware action and local malware analysis

Block File action and local malware analysis

An administrator receives reports that users cannot access a cloud-hosted web server. The access control policy was recently updated with several new policy additions and URL filtering. What must be done to troubleshoot the issue and restore access without sacrificing the organization's security posture?

Identify the blocked traffic in the Cisco FMC connection events to validate the block, and modify the policy to allow the traffic to the web server.

Create a new access control policy rule to allow ports 80 and 443 to the FQDN of the web server.

Identify the blocked traffic in the Cisco FMC connection events to validate the block, and modify the policy to allow the traffic to the web server.

Verify the blocks using the packet capture tool and create a rule with the action monitor for the traffic.

Download a PCAP of the traffic attempts to verify the blocks and use the flexconfig objects to create a rule that allows only the required traffic to the destination server.

Refer to the exhibit. An engineer is modifying an access control policy to add a rule to Inspect all DNS traffic that passes it making the change and deploying the policy, they see that DNS traffic Is not being Inspected by the Snort engine. What is......

The action of the rule is set to trust instead of allow.

The rule must specify the security zone that originates the traffic.

The rule Is configured with the wrong setting for the source port.

The rule must define the source network for inspection as well as the port.

The action of the rule is set to trust instead of allow.

An engineer wants to connect a single IP subnet through a Cisco FTD firewall and enforce policy.There is a requirement to present the internal IP subnet to the outside as a different IP address.What must be configured to meet these requirements?

Configure the Cisco FTD firewall in routed mode with NAT enabled.

Configure the downstream router to perform NAT.

Configure the upstream router to perform NAT.

Configure the Cisco FTD firewall in routed mode with NAT enabled.

Configure the Cisco FTD firewall in transparent mode with NAT enabled.

An analyst using the security analyst account permissions is trying to view the Correlations Events Widget but is not able to access it. However, other dashboards are accessible. Why is this occurring?

The widget is not configured within the Cisco FMC.

An API restriction within the Cisco FMC is preventing the widget from displaying.

The widget is configured to display only when active events are present.

The widget is not configured within the Cisco FMC.

The security analyst role does not have permission to view this widget.

A network administrator configured a NAT policy that translates a public IP address to an internal web server IP address. An access policy has also been created that allows any source to reach the public IP address on port 80. The web server is still not reachable from the Internet on port 80.Which configuration change is needed?

The access policy must allow traffic to the internal web server IP address.

The intrusion policy must be disabled for port 80.

The access policy rule must be configured for the action trust.

The NAT policy must be modified to translate the source IP address as well as destination IP address.

The access policy must allow traffic to the internal web server IP address.

An engineer must configure a Cisco FMC dashboard in a child domain. Which action must be taken so that the dashboard is visible to the parent domain?

Create a copy of the dashboard.

Adjust policy inheritance settings.

Create a copy of the dashboard.

An engineer is troubleshooting connectivity to the DNS servers from hosts behind a new Cisco FTD device. The hosts cannot send DNS queries to servers in the DMZ. Which action should the engineer take to troubleshoot this issue using the real DNS packets?

Use the Connection Events dashboard to check the block reason and adjust the inspection policy as needed.

Use the packet capture tool to check where the traffic is being blocked and adjust the access control or intrusion policy as needed.

Use the packet tracer tool to determine at which hop the packet is being dropped.

Use the show blocks command in the Threat Defense CLI tool and create a policy to allow the blocked traffic.

A security engineer is configuring an Access Control Policy for multiple branch locations. These locations share a common rule set and utilize a network object called INSIDE_NET which contains the locally significant internal network subnets at each location. Which technique will retain the policy consistency at each location but allow only the locally significant network subnet within the applicable rules?

creating an Access Control Policy with an INSIDE_NET network object and object overrides

utilizing a dynamic Access Control Policy that updates from Cisco Talos

creating a unique Access Control Policy per device

creating an Access Control Policy with an INSIDE_NET network object and object overrides

An engineer runs the command restore remote-manager-backup location 2.2.2.2 admin /Volume/home/admin FTD408566513.zip on a Cisco FMC. After connecting to the repository, the Cisco FTD device is unable to accept the backup file.What is the reason for this failure?

The backup file extension was changed from .tar to .zip.

The backup file is not in .cfg format.

The backup file extension was changed from .tar to .zip.

The directory location is incorrect.

A security engineer found a suspicious file from an employee email address and is trying to upload it for analysis, however the upload is failing. The last registration status is still active. What is the cause for this issue?

Cisco AMP for Networks is unable to contact Cisco Threat Grid Cloud.

Cisco AMP for Networks is unable to contact Cisco Threat Grid on premise.

Cisco AMP for Networks is unable to contact Cisco Threat Grid Cloud.

The user agent status is set to monitor.

An engineer must investigate a connectivity issue and decides to use the packet capture feature on Cisco FTD. The goal is to see the real packet going through the Cisco FTD device and see the Snort detection actions as a part of the output. After the capture-traffic command is issued, only the packets are displayed. Which action resolves this issue?

Use the capture command and specify the trace option to get the required information.

Use the verbose option as a part of the capture-traffic command

Use the capture command and specify the trace option to get the required information.

Specify the trace using the -T option after the capture-traffic command.

Perform the trace within the Cisco FMC GUI instead of the Cisco FTD CLI.

An organization must be able to ingest NetFlow traffic from their Cisco FTD device to Cisco Stealthwatch for behavioral analysis. What must be configured on the Cisco FTD to meet this requirement?

interface object to export NetFlow

security intelligence object for NetFlow

variable set object for NetFlow

An administrator must use Cisco FMC to install a backup route within the Cisco FTD to route traffic in case of a routing failure with the primary route. Which action accomplishes this task?

Install the static backup route and modify the metric to be less than the primary route.

Configure EIGRP routing on the FMC to ensure that dynamic routes are always updated.

Use a default route on the FMC instead of having multiple routes contending for priority.

Create the backup route and use route tracking on both routes to a destination IP address in the network.

A network security engineer must export packet captures from the Cisco FMC web browser while troubleshooting an issue. When navigating to the address https://<FMCIP>/capture/CAPI/pcap/test.pcap. an error 403: Forbidden is given instead of the PCAP file. Which action must the engineer take to resolve this issue?

Enable the HTTPS server for the device platform policy.

Disable the HTTPS server and use HTTP instead.

Enable the HTTPS server for the device platform policy.

Disable the proxy setting on the browser.

Use the Cisco FTD IP address as the proxy server setting on the browser.

An engineer is »vorlang on a LAN switch and has noticed that its network connection to the mime Cisco IPS has gone down Upon troubleshooting it is determined that the switch is working as expected What must have been implemented for this failure to occur?

The Cisco IPS is configured in detection mode

The upstream router has a misconfigured routing protocol

Link-state propagation is enabled

The Cisco IPS has been configured to be in fail-open mode

The Cisco IPS is configured in detection mode

Refer to the exhibit An engineer is modifying an access control pokey to add a rule to inspect all DNS traffic that passes through the firewall After making the change and deploying the pokey they see that DNS traffic is not bang inspected by the Snort engine What is the problem?

The action of the rule is set to trust instead of allow.

The rule must specify the security zone that originates the traffic

The rule must define the source network for inspection as well as the port

The action of the rule is set to trust instead of allow.

The rule is configured with the wrong setting for the source port

What is the role of the casebook feature in Cisco Threat Response?

pulling data via the browser extension

A network engineer sets up a secondary Cisco FMC that is integrated with Cisco Security Packet Analyzer What occurs when the secondary Cisco FMC synchronizes with the primary Cisco FMC?

The existing configuration for integration of the secondary Cisco FMC the Cisco Security Packet Analyzer is overwritten.

The existing integration configuration is replicated to the primary Cisco FMC

The existing configuration for integration of the secondary Cisco FMC the Cisco Security Packet Analyzer is overwritten.

The synchronization between the primary and secondary Cisco FMC fails

The secondary Cisco FMC must be reintegrated with the Cisco Security Packet Analyzer after the synchronization

An engineer wants to change an existing transparent Cisco FTD to routed mode.The device controls traffic between two network segments. Which action is mandatory to allow hosts to reestablish communication between these two segments after the change?

implement non-overlapping IP subnets on each segment.

remove the existing dynamic routing protocol settings.

configure multiple BVIs to route between segments.

assign unique VLAN IDs to each firewall interface.

implement non-overlapping IP subnets on each segment.

An engineer installs a Cisco FTD device and wants to inspect traffic within the same subnet passing through a firewall and inspect traffic destined to the internet.Which configuration will meet this requirement?

transparent firewall mode with multiple BVIs

transparent firewall mode with IRB only

routed firewall mode with BVI and routed interfaces

transparent firewall mode with multiple BVIs

routed firewall mode with routed interfaces only

A network administrator is implementing an active/passive high availability Cisco FTD pair.When adding the high availability pair, the administrator cannot select the secondary peer.What is the cause?

The second Cisco FTD is not the same model as the primary Cisco FTD.

An high availability license must be added to the Cisco FMC before adding the high availability pair.

The failover link must be defined on each Cisco FTD before adding the high availability pair.

Both Cisco FTD devices are not at the same software Version

An administrator is configuring their transparent Cisco FTD device to receive ERSPAN traffic from multiple switches on a passive port, but the Cisco FTD is not processing the traffic. What is the problem?

The Cisco FTD must be in routed mode to process ERSPAN traffic.

The switches do not have Layer 3 connectivity to the FTD device for GRE traffic transmission.

The switches were not set up with a monitor session ID that matches the flow ID defined on the Cisco FTD.

The Cisco FTD must be in routed mode to process ERSPAN traffic.

The Cisco FTD must be configured with an ERSPAN port not a passive port.

What is an advantage of adding multiple inline interface pairs to the same inline interface set when deploying an asynchronous routing configuration?

Allows the IPS to identify inbound and outbound traffic as part of the same traffic flow.

The interfaces disable autonegotiation and interface speed is hard coded set to 1000 Mbps.

Allows traffic inspection to continue without interruption during the Snort process restart.

The interfaces are automatically configured as a media-independent interface crossover.

A network administrator cannot select the link to be used for failover when configuring an active/passive HA Cisco FTD pair.Which configuration must be changed before setting up the high availability pair?

An IP address in the same subnet must be added to each Cisco FTD on the interface.

The interface name must be removed from the interface on each Cisco FTD.

The name Failover must be configured manually on the interface on each cisco FTD.

The interface must be configured as part of a LACP Active/Active EtherChannel.

An organization recently implemented a transparent Cisco FTD in their network.They must ensure that the device does not respond to insecure SSL/TLS protocols.Which action accomplishes the task?

Use the Cisco FTD platform policy to change the minimum SSL version on the device to TLS 1.2.

Modify the device's settings using the device management feature within Cisco FMC to force only secure protocols.

Use the Cisco FTD platform policy to change the minimum SSL version on the device to TLS 1.2.

Enable the UCAPL/CC compliance on the device to support only the most secure protocols available.

Configure a FlexConfig object to disable any insecure TLS protocols on the Cisco FTD device.

A network administrator is migrating from a Cisco ASA to a Cisco FTD.EIGRP is configured on the Cisco ASA but it is not available in the Cisco FMC.Which action must the administrator take to enable this feature on the Cisco FTD?

Configure EIGRP parameters using FlexConfig objects.

Add the command feature eigrp via the FTD CLI.

Create a custom variable set and enable the feature in the variable set.

Enable advanced configuration options in the FMC.

The CEO ask a network administrator to present to management a dashboard that shows custom analysis tables for the top DNS queries URL category statistics, and the URL reputation statistics.Which action must the administrator take to quickly produce this information for management?

Create a new dashboard and add three custom analysis widgets that specify the tables needed.

Run the Attack report and filter on DNS to show this information.

Create a new dashboard and add three custom analysis widgets that specify the tables needed.

Modify the Connection Events dashboard to display the information in a view for management.

Copy the intrusion events dashboard tab and modify each widget to show the correct charts.

Cisco 300-710 Practice Test 5 - Free Online Exam Prep & Questions

An engineer must define a URL object on Cisco FMC. What is the correct method to specify the URL without performing SSL inspection?

Become a Premium Member for full access

Unlock Premium Member

Cisco 300-710 Practice Test 5

Question

Cisco 300-710 Practice Tests

Practice Tests