Cisco 300-710 Practice Test - Questions Answers, Page 23
Question list
List of questions
Related questions
A security engineer must deploy a Cisco FTD appliance as a bump in the wire to detect intrusion events without disrupting the flow of network traffic. Which two features must be configured to accomplish the task? (Choose two.)
inline set pair
transparent mode
tapemode
passive interfaces
bridged mode
Due to an Increase in malicious events, a security engineer must generate a threat report to include intrusion events, malware events, and security intelligence events. How Is this information collected in a single report?
Run the default Firepower report.
Export the Attacks Risk report.
Generate a malware report.
Create a Custom report.
An engineer attempts to pull the configuration for a Cisco FTD sensor to review with Cisco TAC but does not have direct access to the CU for the device. The CLl for the device is managed by Cisco FMC to which the engineer has access.
Which action in Cisco FMC grants access to the CLl for the device?
Export the configuration using the Import/Export tool within Cisco FMC.
Create a backup of the configuration within the Cisco FMC.
Use the show run all command in the Cisco FTD CLI feature within Cisco FMC.
Download the configuration file within the File Download section of Cisco FMC.
An administrator is attempting to add a new FTD device to their FMC behind a NAT device with a NAT ID of NAT001 and a password of Cisco0420l06525. The private IP address of the FMC server is 192.168.45.45. which is being translated to the public IP address of 209.165.200.225/27. Which command set must be used in order to accomplish this task?
configure manager add 209.165.200.225 <reg_key> <nat_id>
configure manager add 192.168.45,45 <reg_key> <nat_id>
configure manager add 209.165.200.225 255.255.255.224 <reg_key> <nat_id>
configure manager add 209.165.200.225/27 <reg_key> <nat_id>
A security analyst must create a new report within Cisco FMC to show an overview of the daily attacks, vulnerabilities, and connections. The analyst wants to reuse specific dashboards from other reports to create this consolidated one.
Which action accomplishes this task?
Create a new dashboard object via Object Management to represent the desired views.
Modify the Custom Workflows within the Cisco FMC to feed the desired data into the new report.
Copy the Malware Report and modify the sections to pull components from other reports.
Use the import feature in the newly created report to select which dashboards to add.
A network administrator has converted a Cisco FTD from using LDAP to LDAPS for VPN authentication. The Cisco FMC can connect to the LDAPS server, but the Cisco FTD is not connecting.
Which configuration must be enabled on the Cisco FTD?
SSL must be set to a use TLSv1.2 or lower.
The LDAPS must be allowed through the access control policy.
DNS servers must be defined for name resolution.
The RADIUS server must be defined.
When using Cisco Threat Response, which phase of the Intelligence Cycle publishes the results of the investigation?
direction
dissemination
processing
analysis
A security engineer must integrate an external feed containing STIX/TAXII data with Cisco FMC.
Which feature must be enabled on the Cisco FMC to support this connection?
Cisco Success Network
Cisco Secure Endpoint Integration
Threat Intelligence Director
Security Intelligence Feeds
A network administrator wants to block traffic to a known malware site at https://www.badsite.comand all subdomains while ensuring no packets from any internal client are sent to that site. Whichtype of policy must the network administrator use to accomplish this goal?
Prefilter policy
SSL policy
DNS policy
Access Control policy with URL filtering
An organization is configuring a new Cisco Firepower High Availability deployment. Which action must be taken to ensure that failover is as seamless as possible to end users?
Set up a virtual failover MAC address between chassis.
Use a dedicated stateful link between chassis.
Load the same software version on both chassis.
Set the same FQDN for both chassis.
Question