ExamGecko
Question list
Search
Search

Related questions











Question 176 - 300-710 discussion

Report
Export

An engineer is troubleshooting connectivity to the DNS servers from hosts behind a new Cisco FTD device. The hosts cannot send DNS queries to servers in the DMZ. Which action should the engineer take to troubleshoot this issue using the real DNS packets?

A.

Use the Connection Events dashboard to check the block reason and adjust the inspection policy as needed.

Answers
A.

Use the Connection Events dashboard to check the block reason and adjust the inspection policy as needed.

B.

Use the packet capture tool to check where the traffic is being blocked and adjust the access control or intrusion policy as needed.

Answers
B.

Use the packet capture tool to check where the traffic is being blocked and adjust the access control or intrusion policy as needed.

C.

Use the packet tracer tool to determine at which hop the packet is being dropped.

Answers
C.

Use the packet tracer tool to determine at which hop the packet is being dropped.

D.

Use the show blocks command in the Threat Defense CLI tool and create a policy to allow the blocked traffic.

Answers
D.

Use the show blocks command in the Threat Defense CLI tool and create a policy to allow the blocked traffic.

Suggested answer: A
asked 07/10/2024
Rico Banagale
37 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first