An engineer is investigating connectivity problems on Cisco Firepower for a specific SGT. Which command allows the engineer to capture real packets that pass through the firewall using an SGT of 64?

capture CAP type inline-tag 64 match ip any any

capture CAP match 64 type inline-tag ip any any

capture CAP headers-only type inline-tag 64 match ip any any

capture CAP buffer 64 match ip any any

A company is in the process of deploying intrusion protection with Cisco FTDs managed by a Cisco FMC. Which action must be selected to enable fewer rules detect only critical conditions and avoid false positives?

Balanced Security and Connectivity

An engineer wants to add an additional Cisco FTD Version 6.2.3 device to their current 6.2.3 deployment to create a high availability pair.The currently deployed Cisco FTD device is using local management and identical hardware including the available port density to enable the failover and stateful links required in a proper high availability deployment. Which action ensures that the environment is ready to pair the new Cisco FTD with the old one?

Change from Cisco FDM management to Cisco FMC management on both devices and register them to FMC.

Ensure that the two devices are assigned IP addresses from the 169 254.0.0/16 range for failover interfaces.

Factory reset the current Cisco FTD so that it can synchronize configurations with the new Cisco FTD device.

Ensure that the configured DNS servers match on the two devices for name resolution.

Refer to the exhibit. What is the effect of the existing Cisco FMC configuration?

The management connection between the Cisco FMC and the Cisco FTD is disabled.

The remote management port for communication between the Cisco FMC and the managed device changes to port 8443.

The managed device is deleted from the Cisco FMC.

The SSL-encrypted communication channel between the Cisco FMC and the managed device becomes plain-text communication channel.

The management connection between the Cisco FMC and the Cisco FTD is disabled.

An engineer is troubleshooting a file that is being blocked by a Cisco FTD device on the network.The user is reporting that the file is not malicious.Which action does the engineer take to identify the file and validate whether or not it is malicious?

identify the file in the intrusion events and submit it to Threat Grid for analysis.

Use FMC file analysis to look for the file and select Analyze to determine its disposition.

Use the context explorer to find the file and download it to the local machine for investigation.

Right click the connection event and send the file to AMP for Endpoints to see if the hash is malicious.

An administrator Is setting up a Cisco PMC and must provide expert mode access for a security engineer. The engineer Is permitted to use only a secured out-of-band network workstation with a static IP address to access the Cisco FMC.What must be configured to enable this access?

Enable SSH and define an access list.

Enable HTTP and define an access list.

Enable SCP under the Access List section.

Enable HTTPS and SNMP under the Access List section.

An engainer must add DNS-specific rules to me Cisco FTD intrusion policy. The engineer wants to use the rules currently in the Cisco FTD Snort database that are not already enabled but does not want to enable more than are needed.Which action meets these requirements?

Change the rule state within the policy being used.

Change the dynamic state of the rule within the policy.

Change the base policy to Security over Connectivity.

Change the rule state within the policy being used.

Change the rules using the Generate and Use Recommendations feature.

A network administrator is trying to convert from LDAP to LDAPS for VPN user authentication on a Cisco FTD. Which action must be taken on the Cisco FTD objects to accomplish this task?

Create a Certificate Enrollment object to get the LDAPS certificate needed.

Add a Key Chain object to acquire the LDAPS certificate.

Create a Certificate Enrollment object to get the LDAPS certificate needed.

Identify the LDAPS cipher suite and use a Cipher Suite List object to define the Cisco FTD connection requirements.

Modify the Policy List object to define the session requirements for LDAPS.

What is the RTC workflow when the infected endpoint is identified?

Cisco FMC instructs Cisco ISE to contain the infected endpoint.

Cisco ISE instructs Cisco AMP to contain the infected endpoint.

Cisco ISE instructs Cisco FMC to contain the infected endpoint.

Cisco AMP instructs Cisco FMC to contain the infected endpoint.

Cisco FMC instructs Cisco ISE to contain the infected endpoint.

A security engineer is deploying a pair of primary and secondary Cisco FMC devices. The secondary must also receive updates from Cisco Talos. Which action achieves this goal?

Configure the primary Cisco FMC so that the rules are updated.

Force failover for the secondary Cisco FMC to synchronize the rule updates from the primary.

Configure the secondary Cisco FMC so that it receives updates from Cisco Talos.

Manually import rule updates onto the secondary Cisco FMC device.

Configure the primary Cisco FMC so that the rules are updated.

Refer to the exhibit. A systems administrator conducts a connectivity test to their SCCM server from a host machine and gets no response from the server. Which action ensures that the ping packets reach the destination and that the host receives replies?

Create an access control policy rule that allows ICMP traffic.

Configure a custom Snort signature to allow ICMP traffic after Inspection.

Modify the Snort rules to allow ICMP traffic.

Create an ICMP allow list and add the ICMP destination to remove it from the implicit deny list.

A security engineer must configure a Cisco FTD appliance to inspect traffic coming from the internet.The Internet traffic will be mirrored from the Cisco Catalyst 9300 Switch. Which configuration accomplishes the task?

Set interface configuration mode to passive.

Set interface configuration mode to none.

Set the firewall mode to transparent.

Set the firewall mode to routed.

Set interface configuration mode to passive.

A network engineer must provide redundancy between two Cisco FTD devices. The redundancy configuration must include automatic configuration, translation, and connection updates. After the initial configuration of the two appliances, which two steps must be taken to proceed with the redundancy configuration? (Choose two.)

Configure the virtual MAC address on the failover link.

Configure the standby IP addresses.

Configure the virtual MAC address on the failover link.

Disable hellos on the inside interface.

Configure the standby IP addresses.

Ensure the high availability license is enabled.

Configure the failover link with stateful properties.

A network administrator is configuring an FTD in transparent mode. A bridge group is set up and an access policy has been set up to allow all IP traffic. Traffic is not passing through the FTD. What additional configuration is needed?

An IP address must be assigned to the BVI.

The security levels of the interfaces must be set.

A default route must be added to the FTD.

An IP address must be assigned to the BVI.

A mac-access control list must be added to allow all MAC addresses.

A network administrator registered a new FTD to an existing FMC. The administrator cannot place the FTD in transparent mode. Which action enables transparent mode?

Dereglster the FTD device from FMC and configure transparent mode via the CLI.

Add a Bridge Group Interface to the FTD before transparent mode is configured.

Dereglster the FTD device from FMC and configure transparent mode via the CLI.

Obtain an FTD model that supports transparent mode.

Assign an IP address to two physical interfaces.

Due to an Increase in malicious events, a security engineer must generate a threat report to include intrusion events, malware events, and security intelligence events. How Is this information collected in a single report?

Run the default Firepower report.

Export the Attacks Risk report.

An engineer attempts to pull the configuration for a Cisco FTD sensor to review with Cisco TAC but does not have direct access to the CU for the device. The CLl for the device is managed by Cisco FMC to which the engineer has access.Which action in Cisco FMC grants access to the CLl for the device?

Export the configuration using the Import/Export tool within Cisco FMC.

Create a backup of the configuration within the Cisco FMC.

Use the show run all command in the Cisco FTD CLI feature within Cisco FMC.

Download the configuration file within the File Download section of Cisco FMC.

An administrator is attempting to add a new FTD device to their FMC behind a NAT device with a NAT ID of NAT001 and a password of Cisco0420l06525. The private IP address of the FMC server is 192.168.45.45. which is being translated to the public IP address of 209.165.200.225/27. Which command set must be used in order to accomplish this task?

configure manager add 209.165.200.225 <reg_key> <nat_id>

configure manager add 192.168.45,45 <reg_key> <nat_id>

configure manager add 209.165.200.225 255.255.255.224 <reg_key> <nat_id>

configure manager add 209.165.200.225/27 <reg_key> <nat_id>

A security analyst must create a new report within Cisco FMC to show an overview of the daily attacks, vulnerabilities, and connections. The analyst wants to reuse specific dashboards from other reports to create this consolidated one.Which action accomplishes this task?

Use the import feature in the newly created report to select which dashboards to add.

Create a new dashboard object via Object Management to represent the desired views.

Modify the Custom Workflows within the Cisco FMC to feed the desired data into the new report.

Copy the Malware Report and modify the sections to pull components from other reports.

Use the import feature in the newly created report to select which dashboards to add.

A network administrator has converted a Cisco FTD from using LDAP to LDAPS for VPN authentication. The Cisco FMC can connect to the LDAPS server, but the Cisco FTD is not connecting.Which configuration must be enabled on the Cisco FTD?

The LDAPS must be allowed through the access control policy.

SSL must be set to a use TLSv1.2 or lower.

The LDAPS must be allowed through the access control policy.

DNS servers must be defined for name resolution.

The RADIUS server must be defined.

A security engineer must integrate an external feed containing STIX/TAXII data with Cisco FMC.Which feature must be enabled on the Cisco FMC to support this connection?

Cisco Secure Endpoint Integration

A network administrator wants to block traffic to a known malware site at https://www.badsite.comand all subdomains while ensuring no packets from any internal client are sent to that site. Whichtype of policy must the network administrator use to accomplish this goal?

Access Control policy with URL filtering

An organization is configuring a new Cisco Firepower High Availability deployment. Which action must be taken to ensure that failover is as seamless as possible to end users?

Use a dedicated stateful link between chassis.

Set up a virtual failover MAC address between chassis.

Use a dedicated stateful link between chassis.

Load the same software version on both chassis.

Set the same FQDN for both chassis.

An engineer must deploy a Cisco FTD appliance via Cisco FMC to span a network segment to detect malware and threats. When setting the Cisco FTD interface mode, which sequence of actions meets this requirement?

Set to passive, and configure an access control policy with an intrusion policy and a file policy defined

Set to passive, and configure an access control policy with a prefilter policy defined

Set to none, and configure an access control policy with a prefilter policy defined

Set to none, and configure an access control policy with an intrusion policy and a file policy defined

An engineer wants to perform a packet capture on the Cisco FTD to confirm that the host using IP address 192 168.100.100 has the MAC address of 0042 7734.103 to help troubleshoot a connectivity issue What is the correct tcpdump command syntax to ensure that the MAC address appears in the packet capture output?

-w capture.pcap -s 1518 host 192.168.100.100 mac

-w capture.pcap -s 1518 host 192.168.100.100 ether

An administrator is adding a QoS policy to a Cisco FTD deployment. When a new rule is added to the policy and QoS is applied on 'Interfaces in Destination Interface Objects", no interface objects are available What is the problem?

QoS is available only on routed interfaces, and this device is in transparent mode.

The FTD is out of available resources lor use. so QoS cannot be added

The network segments that the interfaces are on do not have contiguous IP space

QoS is available only on routed interfaces, and this device is in transparent mode.

A conflict exists between the destination interface types that is preventing QoS from being added

A network administrator is troubleshooting access to a website hosted behind a Cisco FTD device External clients cannot access the web server via HTTPS The IP address configured on the web server is 192 168 7.46 The administrator is running the command capture CAP interface outside match ip any 192.168.7.46 255.255.255.255 but cannot see any traffic in the capture Why is this occurring?

The capture must use the public IP address of the web server.

The FTD has no route to the web server.

The access policy is blocking the traffic.

The packet capture shows only blocked traffic

Remote users who connect via Cisco AnyConnect to the corporate network behind a Cisco FTD device report that they get no audio when calling between remote users using their softphones. These same users can call internal users on the corporate network without any issues. What is the cause of this issue?

The hairpinning feature is not available on FTD.

Split tunneling is enabled for the Remote Access VPN on FTD

FTD has no NAT policy that allows outside to outside communication

The Enable Spoke to Spoke Connectivity through Hub option is not selected on FTD.

An engineer must configure the firewall to monitor traffic within a single subnet without increasing the hop count of that traffic. How would the engineer achieve this?

Configure Cisco Firepower as a transparent firewall

Set up Cisco Firepower as managed by Cisco FDM

Configure Cisco Firepower in FXOS monitor only mode.

Set up Cisco Firepower in intrusion prevention mode

Which action must be taken on the Cisco FMC when a packet bypass is configured in case the Snort engine is down or a packet takes too long to process?

Enable Automatic Application Bypass

Enable Inspect Local Router Traffic

Enable Automatic Application Bypass

Configure Fastpath rules to bypass inspection

Add a Bypass Threshold policy for failures

An engineer is configuring multiple Cisco FTD appliances (or use in the network. Which rule must the engineer follow while defining interface objects in Cisco FMC for use with interfaces across multiple devices?

Interface groups can contain interfaces from many devices.

An interface cannot belong to a security zone and an interface group

Interface groups can contain multiple interface types

Interface groups can contain interfaces from many devices.

Two security zones can contain the same interface

Cisco 300-710 Practice Test 6 - Free Online Exam Prep & Questions

Which Cisco FMC report gives the analyst information about the ports and protocols that are related to the configured sensitive network for analysis?

Become a Premium Member for full access

Unlock Premium Member

Cisco 300-710 Practice Test 6

Question

Cisco 300-710 Practice Tests

Practice Tests