Cisco 300-710 Practice Test - Questions Answers
List of questions
Question 1

What is a result of enabling Cisco FTD clustering?
For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections.
Integrated Routing and Bridging is supported on the master unit.
Site-to-site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails.
All Firepower appliances can support Cisco FTD clustering.
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-configguide-v64/clustering_for_the_firepower_threat_defense.html
Question 2

Which two conditions are necessary for high availability to function between two Cisco FTD devices?
(Choose two.)
The units must be the same version
Both devices can be part of a different group that must be in the same domain when configured within the FMC.
The units must be different models if they are part of the same series.
The units must be configured only for firewall routed mode.
The units must be the same model.
Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-managementcenter/212699- configure-ftd-high-availability-on-firep.html
Question 3

On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?
transparent inline mode
TAP mode
strict TCP enforcement
propagate link state
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-configguide-v64/inline_sets_and_passive_interfaces_for_firepower_threat_defense.html
Question 4

What are the minimum requirements to deploy a managed device inline?
inline interfaces, security zones, MTU, and mode
passive interface, MTU, and mode
inline interfaces, MTU, and mode
passive interface, security zone, MTU, and mode
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-configguide-v65/ips_device_deployments_and_configuration.html
Question 5

What is the difference between inline and inline tap on Cisco Firepower?
Inline tap mode can send a copy of the traffic to another device.
Inline tap mode does full packet capture.
Inline mode cannot do SSL decryption.
Inline mode can drop malicious traffic.
Question 6

With Cisco Firepower Threat Defense software, which interface mode must be configured to passively receive traffic that passes through the appliance?
inline set
passive
routed
inline tap
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-configguide-v64/interface_overview_for_firepower_threat_defense.html
Question 7

Which two deployment types support high availability? (Choose two.)
transparent
routed
clustered
intra-chassis multi-instance
virtual appliance in public cloud
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-configguide-v61/firepower_threat_defense_high_availability.html
Question 8

Which protocol establishes network redundancy in a switched Firepower device deployment?
STP
HSRP
GLBP
VRRP
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-configguide-v62/firepower_threat_defense_high_availability.html
Question 9

Which interface type allows packets to be dropped?
passive
inline
ERSPAN
TAP
Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200908-configuring-firepower- threat-defense-int.html
Question 10

Which Cisco Firepower Threat Defense, which two interface settings are required when configuring a routed interface? (Choose two.)
Redundant Interface
EtherChannel
Speed
Media Type
Duplex
https://www.cisco.com/c/en/us/td/docs/security/firepower/610/fdm/fptd-fdm-config-guide-610/fptd-fdm- interfaces.html
Question