Cisco 300-710 Practice Test - Questions Answers, Page 20
Question list
List of questions
Related questions
An engineer wants to change an existing transparent Cisco FTD to routed mode.
The device controls traffic between two network segments. Which action is mandatory to allow hosts to reestablish communication between these two segments after the change?
remove the existing dynamic routing protocol settings.
configure multiple BVIs to route between segments.
assign unique VLAN IDs to each firewall interface.
implement non-overlapping IP subnets on each segment.
An engineer installs a Cisco FTD device and wants to inspect traffic within the same subnet passing through a firewall and inspect traffic destined to the internet.
Which configuration will meet this requirement?
transparent firewall mode with IRB only
routed firewall mode with BVI and routed interfaces
transparent firewall mode with multiple BVIs
routed firewall mode with routed interfaces only
A network administrator is deploying a Cisco IPS appliance and needs it to operate initially without affecting traffic flows.
It must also collect data to provide a baseline of unwanted traffic before being reconfigured to drop it. Which Cisco IPS mode meets these requirements?
failsafe
inline tap
promiscuous
bypass
A network administrator is implementing an active/passive high availability Cisco FTD pair.
When adding the high availability pair, the administrator cannot select the secondary peer.
What is the cause?
The second Cisco FTD is not the same model as the primary Cisco FTD.
An high availability license must be added to the Cisco FMC before adding the high availability pair.
The failover link must be defined on each Cisco FTD before adding the high availability pair.
Both Cisco FTD devices are not at the same software Version
An administrator is configuring their transparent Cisco FTD device to receive ERSPAN traffic from multiple switches on a passive port, but the Cisco FTD is not processing the traffic. What is the problem?
The switches do not have Layer 3 connectivity to the FTD device for GRE traffic transmission.
The switches were not set up with a monitor session ID that matches the flow ID defined on the Cisco FTD.
The Cisco FTD must be in routed mode to process ERSPAN traffic.
The Cisco FTD must be configured with an ERSPAN port not a passive port.
What is an advantage of adding multiple inline interface pairs to the same inline interface set when deploying an asynchronous routing configuration?
Allows the IPS to identify inbound and outbound traffic as part of the same traffic flow.
The interfaces disable autonegotiation and interface speed is hard coded set to 1000 Mbps.
Allows traffic inspection to continue without interruption during the Snort process restart.
The interfaces are automatically configured as a media-independent interface crossover.
A network administrator cannot select the link to be used for failover when configuring an active/passive HA Cisco FTD pair.
Which configuration must be changed before setting up the high availability pair?
An IP address in the same subnet must be added to each Cisco FTD on the interface.
The interface name must be removed from the interface on each Cisco FTD.
The name Failover must be configured manually on the interface on each cisco FTD.
The interface must be configured as part of a LACP Active/Active EtherChannel.
An organization recently implemented a transparent Cisco FTD in their network.
They must ensure that the device does not respond to insecure SSL/TLS protocols.
Which action accomplishes the task?
Modify the device's settings using the device management feature within Cisco FMC to force only secure protocols.
Use the Cisco FTD platform policy to change the minimum SSL version on the device to TLS 1.2.
Enable the UCAPL/CC compliance on the device to support only the most secure protocols available.
Configure a FlexConfig object to disable any insecure TLS protocols on the Cisco FTD device.
A network administrator is migrating from a Cisco ASA to a Cisco FTD.
EIGRP is configured on the Cisco ASA but it is not available in the Cisco FMC.
Which action must the administrator take to enable this feature on the Cisco FTD?
Configure EIGRP parameters using FlexConfig objects.
Add the command feature eigrp via the FTD CLI.
Create a custom variable set and enable the feature in the variable set.
Enable advanced configuration options in the FMC.
The CEO ask a network administrator to present to management a dashboard that shows custom analysis tables for the top DNS queries URL category statistics, and the URL reputation statistics.
Which action must the administrator take to quickly produce this information for management?
Run the Attack report and filter on DNS to show this information.
Create a new dashboard and add three custom analysis widgets that specify the tables needed.
Modify the Connection Events dashboard to display the information in a view for management.
Copy the intrusion events dashboard tab and modify each widget to show the correct charts.
Question