An administrator must fix a network problem whereby traffic from the inside network to a webserver is not getting through an instance of Cisco Secure Firewall Threat Defense. Which command must the administrator use to capture packets to the webserver that are dropped by Secure Firewall Throat Defense and resold the issue?

capture CAP type asp-drop all headers-only

capture CAP int OUTSIDE match ip any host WEBSERVERIP

capture CAP type asp-drop all headers-only

capture CAP int INSIDE match ip any host WEBSERVERIP

capture CAP int INSIDE match tcp any 80 host WEBSERVERlP 80

A network administrator is trying to configure an access rule to allow access to a specific banking site over HTTPS. Which method must the administrator use to meet the requirement?

Enable SSL decryption and specify the URL.

Define the URL to be blocked and set the application to HTTP.

Define the URL to be blocked and disable SSL inspection.

Block the category of banking and define the application of WWW.

Which component simplifies incident investigation with Cisco Threat Response?

Cisco Secure Firewall appliance

Refer to the exhibit. A company is deploying a pair of Cisco Secure Firewall Threat defence devices named FTD1 and FTD2. FTD1 and FTD2 have been configured as an active/standby pair with a failover link but without a stateful link. What must be implemented next to ensure that users on the internal network still communicate with outside devices if FTD1 fails?

Connect and configure a stateful link and thon deploy the changes.

Disable port security on the switch interfaces connected to FTD1 and FTD2.

Set maximum secured addresses to two on the switch interfaces on FTD1 and FTD2.

Connect and configure a stateful link and thon deploy the changes.

Configure the spanning-tree PortFasI feature on SW1 and FTD2

A network engineer must configure IPS mode on a Cisco Secure firewall Threat Defense device to inspect traffic and act as an IDS. The engineer already configured the passive-interface on the secure firewall threat Defence device and SPAN on the switch. What must be configured next by the engineer?

intrusion policy on the Secure Firewall Threat Defense device

active Interface on me Secure Firewall threat Defense device

An administrator is attempting to add a Cisco Secure Firewall Threat Defence device to Cisco Secure Firewall Management Center with a password of Cisco0480846211 480846211. The private IP address of the FMC server is 192.168.75.201. Which command must be used in order to accomplish this task?

configure manager add 192.16875.201 <reg_key>

configure manager add 192.168.75.201/24 <reg_key>

configure manager add 192.16875.201 <reg_key>

configure manager add 192.168.45.45 <reg_key> <nal-ld>

configure manager add 192.168.75.201 255.255.255.0 <reg_key>

An engineer is configuring URL filtering tor a Cisco Secure Firewall Threat Defense device in Cisco Secure Firewall Management Centre. Use's must receive a warning when they access ..wwww badaduitsito com with the option of continuing to the website if they choose to No other websites should he blocked. Which two actions must the engineer take to moot these requirements?

Configure an access control rule that matches an URL object for http://www.Dadadullsile.com' and set the action to Interactive Block.

On the HTTP Responses tab of the access control policy editor, set the Interactive Block Response Page to System-provided.

Configure an access control rule that matches an URL object for http://www.Dadadullsile.com' and set the action to Interactive Block.

On the HTTP Responses tab of the access control policy editor, set the Interactive Block Response Page to System-provided.

Configure the default action for the access control policy to Interactive Block.

On the HTTP Responses tab of the access control policy editor set the Block Response Page to Custom.

Configure an access control rule that matches the Adult URL category and sot the action to Interactive Block

A company is deploying Cisco Secure Endpoint private cloud. The Secure Endpoint private cloud instance has already been deployed by the server administrator. The server administrator provided the hostname of the private cloud instance to the network engineer via email. What additional information does the network engineer require from the server administrator to be able to make the connection to Secure Endpoint private cloud in Cisco Secure Firewall Management Centre?

SSL certificate for the Secure Endpoint ornate cloud instance

Internet access for the Secure End point private cloud to reach the Secure Endpoint public cloud

Username and password to the Secure Endpoint private cloud instance

IP address and port number for the connection proxy

Network users experience issues when accessing a server on a different network segment. An engineer investigates the issue by performing packet capture on Cisco Secure Firewall Threat Defense. The engineer expects more data and suspects that not all the traffic was collected during a 15-minute can't captured session. Which action must the engineer take to resolve the issue?

Ensure that the allocated memory is sufficient.

Forward the captured data lo an FTP server

Increase the amount of RAM allocated for the capture.

Provide a file name to save the data.

Ensure that the allocated memory is sufficient.

Users report that Cisco Duo 2FA fails when they attempt to connect to the VPN on a Cisco Secure Firewall Threat Defense (FTD) device IT staff have VPN profiles that do not require multifactor authentication and they can connect to the VPN without any issues When viewing the VPN troubleshooting log in Cisco Secure Firewall Management Centre (FMC), the network administrator sees an error in the Cisco Duo AAA server has been marked as tailed. What is the root cause of the Issue?

Duo trust certificates are missing from the Secure FTD device.

Multifactor authentication Is not supported on Secure FMC managed devices.

Duo trust certificates are missing from the Secure FTD device.

The internal AD server is unreachable from the Secure FTD device.

AD Trust certificates are missing from the Secure FTD device.

An engineer must change the mode of a Cisco Secure Firewall Threat Defense (FTD) firewall in the Cisco Secure Firewall Management Center (FMC) inventory. The engineer must take these actions:* Register Secure FTD with Secure FMC.* Change the firewall mode.* Deregister the Secure FTD device from Secure FMC.How must the engineer take FTD take the actions?

Access the Secure FTD CLI from the console port.

Configure the management IP address.

Access the Secure FTD CLI from the console port.

Erase the Secure FTD configuration

A network administrator wants to configure a Cisco Secure Firewall Threat Defense instance managed by Cisco Secure Firewall Management Center to block traffic to known cryptomning networks. Which system settings must the administrator configure in Secure Firewall Management Center to meet the requirement?

Access Policy. Security Intelligence

Rules Intrusion Policy. Security Intelligence

An administrator is configuring the interface of a Cisco Secure Firewall Threat Defense device in a passive IPS deployment. The device and interface have been identified. Which set of configuration steps of the administrator take next to complete the implementation?

Set the interface mode to passive. Associate the interface with a security zone. Enable the interface. Set the MTU parameter.

Set the interface mode to passive. Associate the interface with a security zone. Set the MTU parameter. Reset the interface.

Modify the interface to retransmit received traffic. Associate the interface with a security zone Enable the interface. Sat the MTU parameter.

Modify the interface to retransmit received traffic. Associate the interface with a security zone. Set the MTU parameter.

Set the interface mode to passive. Associate the interface with a security zone. Enable the interface. Set the MTU parameter.

Refer to the exhibit. An engineer generates troubleshooting files in Cisco Secure Firewall Management Center (FMC). A successfully completed task Is removed before the files are downloaded. Which two actions must be taken to determine the filename and obtain the generated troubleshooting files without regenerating them? (Choose two.)

Go to expert mode on Secure FMC. list the contents of/Var/common, and determine the correct filename from the output

Click System Monitoring, men Audit to determine the correct filename from the line containing the Generate Troubleshooting Files string.

Use an FTP client Hi expert mode on Secure FMC lo upload the files to the FTP server.

Go to the same screen as shown in the exhibit, click Advanced Troubleshooting, enter the rile name, and then start the download

Connect to CU on the FTD67 and FTD66 devices and copy the tiles from flash to the PIP server.

Go to expert mode on Secure FMC. list the contents of/Var/common, and determine the correct filename from the output

Click System Monitoring, men Audit to determine the correct filename from the line containing the Generate Troubleshooting Files string.

An administrator is configuring a new report template off. of a saved search within Cisco Secure Firewall Management Centre. The goal is to use the malware analysis report template, but use a different type saved search as the basis. The report is not working. What must be considered when configuring this report template?

Saved searches can be used for the same report template only

Saved searches are available freely for all report templates within the same domain.

Saved searches from a different report template must be used.

Saved searches must be renamed before using for different report template.

An engineer must export a packet capture from Cisco Secure Firewall Management Center to assist in troubleshooting an issue an a Secure Firewall Threat Defense device. When the engineer navigates to URL for Secure Firewall Management Center at:..<FMC IP>/capture/CAP/pcap/sample.pcapAn engineer receives a 403: Forbidden error instead of being provided with the PCAP file. Which action resolves the issue?

Enable HTTPS in the device platform policy.

Disable the HTTPS server and use HTTP.

Enable the proxy setting in the device platform policy.

Enable HTTPS in the device platform policy.

Disable the proxy setting on the client browser.

An administrator configures the interfaces of a Cisco Secure Firewall Threat Defence device in an inline IPS deployment. The administrator completes these actions:* identifies the device and the interfaces* sets the interface mode to inline* enables the interlacesWhich configuration step must the administrator take next to complete the implementation?

Enable spanning-tree PortFast on the interfaces.

Set the interface to Transparent mode.

Set the interface to routed mode.

A network engineer detects a connectivity issue between Cisco Secure Firewall Management Centre and Cisco Secure Firewall Threat Defense Initial troubleshooting indicates that heartbeats and events not being received. The engineer re-establishes the secure channels between both peers Which two commands must the engineer run to resolve the issue? (Choose two.)

sudo perfstats -Cq < /var/sf/rna/correlator-stats/now

An engineer must replace a Cisco Secure Firewall high-availability device due to a failure. When the replacement device arrives, the engineer must separate the high-availability pair from Cisco Secure Firewall Management Center Which action must the engineer take first to restore high availability?

Unregister the secondary device.

Force a break between the devices.

Unregister the secondary device.

Configure NTP time synchronization.

Refer to the exhibit. A Cisco Secure Firewall Threat Defense (FTD) device is deployed in inline mode with an inline set. The network engineer wants router R2 to remove the directly connected route M 68.1.0/24 from its routing table when the cable between routed R1 and the Secure FTD device Is disconnected. Which action must the engineer take?1

Implement the Propagate Link Stale option on the Secure FTD device

Establish a routing protocol between R1 and R2.

Disable hardware bypass on the Secure FTD device.

Implement autostate functionality on the Gi0/2 interface of R2

A network administrator is deploying a new Cisco Secure Firewall Threat Defense (FTD) firewall After Cisco Secure FTD is deployed, inside clients nave intermittent connectivity to each other. When ... the packet capture on the Secure FTD firewall, the administrator sees that Secure FID is responding to all the AW requests on the inside network. Which action must the network administrator e to resolve the issue''

Review NAT policy and disable incorrect proxy ARP configuration.

Hardcode the MAC address of the FTD to IP mapping on client machines.

Review the access policy and verify that ARP is allowed from inside to inside.

Convert the FTD to transparent mode to allow ARP requests.

An organization created a custom application that is being flagged by Cisco Secure Endpoint. The application must be exempt from being flagged. What is the process to meet the requirement?

Preculculate the hash value of the custom application and add it to the allowed applications.

Modify the custom detection list to exclude me custom application.

Preculculate the hash value of the custom application and add it to the allowed applications.

Configure the custom application to use the information-store paths.

Add the custom application to the DFC 1st and update the policy.

What is the result when two users modify a VPN policy at the same lime on a Cisco Secure Firewall Management Center managed device?

The first user locks the configuration when selecting edit on the policy.

Both users can edit the policy arid the last saved configuration persists.

The first user locks the configuration when selecting edit on the policy.

The changes from both users will be merged together into the policy.

The system prevents modifications to the policy by multiple users.

A security engineer manages a firewall console and an endpoint console and finds it challenging and the consuming to review events and modify blocking of specific files in both consoles. Which action must the engineer take to streamline this process?

initiate the integration between Secure FMC and Cisco Secure Endpoint from the Secure FMC using the AMP tab

From the Secure FMC. create a Cisco Secure Endpoint object and reference the object in the Cisco Secure Endpoint console.

From the Cisco Secure Endpoint console, Croats and copy an API key and paste into the Cisco Secure AMP tab

initiate the integration between Secure FMC and Cisco Secure Endpoint from the Secure FMC using the AMP tab

Within the Cisco Secure Endpoint console, copy the connector GUID and paste into the Cisco Secure Firewall Management Center (FMC) AMP tab.

Cisco 300-710 Practice Test 8 - Free Online Exam Prep & Questions

Which action must be taken to configure an isolated bridge group for IRB mode on a Cisco Secure Firewall device?

Become a Premium Member for full access

Unlock Premium Member

Cisco 300-710 Practice Test 8

Question

Cisco 300-710 Practice Tests

Practice Tests