An engineer must configure a Cisco FMC dashboard in a multidomain deployment Which action must the engineer take to edit a report template from an ancestor domain?

Assign themselves ownership of it

Change the document attributes.

What must be implemented on Cisco Firepower to allow multiple logical devices on a single physical device to have access to external hosts?

Add one shared management interface on all logical devices.

Add at least two container instances from the same module.

Set up a cluster control link between all logical devices

Add one shared management interface on all logical devices.

Define VLAN subinterfaces for each logical device.

An administrator is configuring a transparent Cisco FTD device to receive ERSPAN traffic from multiple switches on a passive port but the FTD is not processing the traffic What is the problem?

The FTD must &e in routed mode to process ERSPAN traffic.

The switches do not have Layer 3 connectivity to the FTD device for GRE traffic transmission.

The FTD must be configured with an ERSPAN port, not a passive port.

The FTD must &e in routed mode to process ERSPAN traffic.

The switches were not set up with a monitor session ID (hat matches the flow ID defined on the FTD

Balanced Security and Connectivity

An organization is implementing Cisco FTD using transparent mode in the network. Which rule in the default Access Control Policy ensures that this deployment does not create a loop in the network?

Multicast and broadcast packets are denied by default.

ARP inspection is enabled by default.

Multicast and broadcast packets are denied by default.

STP BPDU packets are allowed by default.

ARP packets are allowed by default.

An organization is installing a new Cisco FTD appliance in the network. An engineer is tasked with configuring access between two network segments within the same IP subnet. Which step is needed to accomplish this task?

Assign an IP address to the Bridge Virtual Interface.

Permit BPDU packets to prevent loops.

Specify a name for the bridge group.

Add a separate bridge group for each segment.

A security engineer is adding three Cisco FTD devices to a Cisco FMC. Two of the devices have successfully registered to the Cisco FMC. The device that is unable to register is located behind a router that translates all outbound traffic to the router's WAN IP address. Which two steps are required for this device to register to the Cisco FMC? (Choose two.)

Configure a NAT ID on both the Cisco FMC and the device.

Remove the IP address defined for the device in the Cisco FMC.

Reconfigure the Cisco FMC lo use the device's private IP address instead of the WAN address.

Configure a NAT ID on both the Cisco FMC and the device.

Add the port number being used for PAT on the router to the device's IP address in the Cisco FMC.

Reconfigure the Cisco FMC to use the device's hostname instead of IP address.

Remove the IP address defined for the device in the Cisco FMC.

An engineer defines a new rule while configuring an Access Control Policy. After deploying the policy, the rule is not working as expected and the hit counters associated with the rule are showing zero.What is causing this error?

The rule was not enabled after being created.

Logging is not enabled for the rule.

The rule was not enabled after being created.

The wrong source interface for Snort was selected in the rule.

An incorrect application signature was used in the rule.

A network administrator is configuring a site-to-site IPsec VPN to a router sitting behind a Cisco FTD.The administrator has configured an access policy to allow traffic to this device on UDP 500, 4500, and ESP VPN traffic is not working. Which action resolves this issue?

Enable IPsec inspection on the access policy.

Set the allow action in the access policy to trust.

Enable IPsec inspection on the access policy.

Modify the NAT policy to use the interface PAT.

Change the access policy to allow all ports.

An engineer is troubleshooting HTTP traffic to a web server using the packet capture tool on CiscoFMC. When reviewing the captures, the engineer notices that there are a lot of packets that are notsourced from or destined to the web server being captured. How can the engineer reduce the strainof capturing packets for irrelevant traffic on the Cisco FTD device?

Use the host filter in the packet capture to capture traffic to or from a specific host.

Redirect the packet capture output to a .pcap file that can be opened with Wireshark.

Use the -c option to restrict the packet capture to only the first 100 packets.

Use an access-list within the packet capture to permit only HTTP traffic to and from the webserver.

A security engineer needs to configure a network discovery policy on a Cisco FMC appliance and prevent excessive network discovery events from overloading the FMC database? Which action must be taken to accomplish this task?

Exclude load balancers and NAT devices in the policy.

Change the network discovery method to TCP/SYN.

Configure NetFlow exporters for monitored networks.

Monitor only the default IPv4 and IPv6 network ranges.

Exclude load balancers and NAT devices in the policy.

An engineer needs to configure remote storage on Cisco FMC. Configuration backups must be available from a secure location on the network for disaster recovery. Reports need to back up to a shared location that auditors can access with their Active Directory logins. Which strategy must the engineer use to meet these objectives?

Use SMB for both backups and reports.

Use SMB for backups and NFS for reports.

Use NFS for both backups and reports.

Use SMB for both backups and reports.

Use SSH for backups and NFS for reports.

A network security engineer must export packet captures from the Cisco FMC web browser while troubleshooting an issue. When navigating to the address https://<FMCIP>/capture/CAPI/pcap/test.pcap. an error 403: Forbidden is given instead of the PCAP file. Which action must the engineer take to resolve this issue?

Cisco Firepower Threat Defense mode

Integrated routing and bridging

An engineer Is configuring a Cisco FTD device to place on the Finance VLAN to provide additional protection tor company financial data. The device must be deployed without requiring any changes on the end user workstations, which currently use DHCP lo obtain an IP address. How must the engineer deploy the device to meet this requirement?

Deploy the device in transparent mode and allow DHCP traffic in the access control policies

Deploy the device in routed mode and allow DHCP traffic in the access control policies.

Deploy the device in routed made aid enable the DHCP Relay feature.

Deploy the device in transparent mode and allow DHCP traffic in the access control policies

Deploy the device in transparent mode and enable the DHCP Server feature.

A consultant Is working on a project where the customer is upgrading from a single Cisco Firepower 2130 managed by FDM to a pair of Cisco Firepower 2130s managed oy FMC tor nigh availability. The customer wants the configures of the existing device being managed by FDM to be carried over to FMC and then replicated to the additional: device being added to create the high availability pair. Which action must the consultant take to meet this requirement?

The current FDM configuration will be converted automatically into FMC when the device registers.

The current FDM configuration must be configured by hand into FMC before the devices are registered.

The current FDM configuration will be converted automatically into FMC when the device registers.

The current FDM configuration must be migrated to FMC using the Secure Firewall Migration Tool.

The FTD configuration must be converted to ASA command format, which can then be migrated to FMC.

An engineer plans to reconfigure an existing Cisco FTD from transparent mode to routed mode. Which additional action must be taken to maintain communication Between me two network segments?

Update the IP addressing so that each segment is a unique IP subnet.

Configure a NAT rule so mat traffic between the segments is exempt from NAT.

Update the IP addressing so that each segment is a unique IP subnet.

Deploy inbound ACLs on each interface to allow traffic between the segments.

Assign a unique VLAN ID for the interface in each segment.

A network administrator reviews me attack risk report and notices several Low-Impact attacks. What does this type of attack indicate?

The host is not vulnerable to those attacks.

All attacks are listed as low until manually categorized.

The host is not vulnerable to those attacks.

The attacks are not dangerous to the network.

The host is not within the administrator's environment.

Network users are experiencing Intermittent issues with internet access. An engineer ident med mat the issue Is being caused by NAT exhaustion. How must the engineer change the dynamic NAT configuration to provide internet access for more users without running out of resources?

Configure fallthrough to interface PAT on 'he Advanced tab.

Define an additional static NAT for the network object in use.

Configure fallthrough to interface PAT on 'he Advanced tab.

Convert the dynamic auto NAT rule to dynamic manual NAT.

Add an identity NAT rule to handle the overflow of users.

A network administrator is reviewing a weekly scheduled attacks risk report and notices a host that is flagged for an impact 2 attack. Where should the administrator look within Cisco FMC to find out more relevant information about this host and attack?

Analysis > Hosts > Vulnerabilities

Analysis > Correlation > Correlation Events

Analysis > Hosts > Vulnerabilities

Analysis > Hosts > Host Attributes

An engineer must deploy a Cisco FTD device. Management wants to examine traffic without requiring network changes that will disrupt end users. Corporate security policy requires the separation of management traffic from data traffic and the use of SSH over Telnet for remote administration. How must the device be deployed to meet these requirements?

in transparent mode with a management Interface

in routed mode with a diagnostic interface

in transparent mode with a management Interface

in transparent made with a data interface

in routed mode with a bridge virtual interface

An engineer is configuring URL filtering for a Cisco FTD device in Cisco FMC. Users must receive a warning when they access http:/'www.Dac'additstte.corn with the option of continuing to the website if they choose to. No other websites should be blacked. Which two actions must the engineer lake to meet these requirements? (Choose two.)

On the HTTP Responses tab of the access control policy editor, sot the Interactive Block Response Page to system-provided.

Configure an access control rule that matches an URL object for http://www.badaduitslte.com; and set the action to interactive Block.

On the HTTP Responses tab of the access control policy editor, set the Block Response Page to Custom.

On the HTTP Responses tab of the access control policy editor, sot the Interactive Block Response Page to system-provided.

Configure the default action for the access control policy to Interactive Block.

Configure an access control rule that matches the Adult URL category and se: the action to interactive Block.

Configure an access control rule that matches an URL object for http://www.badaduitslte.com; and set the action to interactive Block.

A network administrator is reviewing a monthly advanced malware risk report and notices a host that Is listed as CnC Connected. Where must the administrator look within Cisco FMC to further determine if this host is infected with malware?

Analysis > Hosts > indications of Compromise

Analysts > Files > Malware Events

Analysis > Hosts > Host Attributes

Analysis > Flies > Network File Trajectory

An engineer must investigate a connectivity issue from an endpoint behind a Cisco FTD device and a public DNS server. The endpoint cannot perform name resolution queries. Which action must the engineer perform to troubleshoot the issue by simulating real DNS traffic on the Cisco FTD while verifying the Snarl verdict?

Use the Capture w/Trace wizard in Cisco FMC.

Perform a Snort engine capture using tcpdump from the FTD CLI.

Use the Capture w/Trace wizard in Cisco FMC.

Create a Custom Workflow in Cisco FMC.

Run me system support firewall-engine-debug command from me FTD CLI.

What is a limitation to consider when running a dynamic routing protocol on a Cisco FTD device in IRB mode?

Only nonbridge interfaces are supported.

Only link-stale routing protocols are supported.

Only distance vector routing protocols are supported.

Only EtherChannel interfaces are supposed.

Only nonbridge interfaces are supported.

Cisco 300-710 Practice Test 7 - Free Online Exam Prep & Questions

An engineer is creating an URL object on Cisco FMC How must it be configured so that the object will match for HTTPS traffic in an access control policy?

Become a Premium Member for full access

Unlock Premium Member

Cisco 300-710 Practice Test 7

Question

Cisco 300-710 Practice Tests

Practice Tests