Cisco Securing Networks with Cisco Firepower - 300-710 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

An organization is configuring a new Cisco Firepower High Availability deployment. Which actionmust be taken to ensure that failover is as seamless as possible to end users?

A. Set up a virtual failover MAC address between chassis. B. Set the same FQDN for both chassis. C. Load the same software version on both chassis. D. Use a dedicated stateful link between chassis.

Discussion 0

Correct Answer: D Vote an answer

Question 2

What are two application layer preprocessors? (Choose two.)

A. ICMP B. CIFS C. DNP3 D. IMAP E. SSL

Discussion 0

Correct Answer: D,E Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

A network administrator notices that inspection has been interrupted on all non-managed interfaces of a device. What is the cause of this?

A. Multiple inline interface pairs were added to the same inline interface. B. The value of the highest MSS assigned to any non-management interface was changed. C. A passive interface was associated with a security zone. D. The value of the highest MTU assigned to any non-management interface was changed.

Discussion 0

Correct Answer: D Vote an answer

Question 4

A security engineer must deploy a Cisco FTD appliance as a bump in the wire to detect intrusion events without disrupting the flow of network traffic. Which two features must be configured to accomplish the task?
(Choose two.)

A. passive interfaces B. inline set pair C. transparent mode D. bridged mode E. tapemode

Discussion 0

Correct Answer: C,E Vote an answer

Question 5

An administrator is configuring their transparent Cisco FTD device to receive ERSPAN traffic from multiple switches on a passive port, but the Cisco FTD is not processing the traffic. What is the problem?

A. The switches were not set up with a monitor session ID that matches the flow ID defined on the CiscoFTD. B. The switches do not have Layer 3 connectivity to the FTD device for GRE traffic transmission. C. The Cisco FTD must be in routed mode to process ERSPAN traffic. D. The Cisco FTD must be configured with an ERSPAN port not a passive port.

Discussion 0

Correct Answer: C Vote an answer

Question 6

An engineer is configuring Cisco FMC and wants to limit the time allowed for processing packets through the interface However if the time is exceeded the configuration must allow packets to bypass detection What must be configured on the Cisco FMC to accomplish this task?

A. Automatic Application Bypass B. Cisco ISE Security Group Tag C. Fast-Path Rules Bypass D. Inspect Local Traffic Bypass

Discussion 0

Correct Answer: A Vote an answer

Question 7

What is the advantage of having Cisco Firepower devices send events to Cisco Threat Response via the security services exchange portal directly as opposed to using syslog?

A. All types of Cisco Firepower devices are supported. B. Cisco Firepower devices do not need to be connected to the Internet. C. Supports all devices that are running supported versions of Cisco Firepower. D. An on-premises proxy server does not need to be set up and maintained.

Discussion 0

Correct Answer: D Vote an answer

Question 8

An engineer configures a network discovery policy on Cisco FMC. Upon configuration, it is noticed that excessive and misleading events filing the database and overloading the Cisco FMC. A monitored NAT device is executing multiple updates of its operating system in a short period of time. What configurationchange must be made to alleviate this issue?

A. Exclude load balancers and NAT devices. B. Increase the number of entries on the NAT device. C. Change the method to TCP/SYN. D. Leave default networks.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

A network engineer implements a new Cisco Firepower device on the network to take advantage of its intrusion detection functionality. There is a requirement to analyze the traffic going across the device, alert on any malicious traffic, and appear as a bump in the wire How should this be implemented?

A. Specify the BVl IP address as the default gateway for connected devices. B. Configure a bridge group in transparent mode. C. Enable routing on the Cisco Firepower D. Add an IP address to the physical Cisco Firepower interfaces.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 10

A hospital network needs to upgrade their Cisco FMC managed devices and needs to ensure that a disaster recovery process is in place. What must be done in order to minimize downtime on the network?

A. Keep a copy of the current configuration to use as backup B. Configure the Cisco FMCs for failover C. Configure a second circuit to an ISP for added redundancy D. Configure the Cisco FMC managed devices for clustering.

Discussion 0

Correct Answer: A Vote an answer

Question 11

A company is in the process of deploying intrusion prevention with Cisco FTDs managed by a Cisco FMC.
An engineer must configure policies to detect potential intrusions but not block the suspicious traffic. Which action accomplishes this task?

A. Configure IPS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by checking the " Drop when inline " option. B. Configure IDS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by checking the " Drop when inline " option. C. Configure IDS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by unchecking the " Drop when inline " option. D. Configure IPS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by unchecking the " Drop when inline " option.

Discussion 0

Correct Answer: C Vote an answer

Question 12

Which firewall design allows a firewall to forward traffic at layer 2 and layer 3 for the same subnet?

A. integrated routing and bridging B. Cisco Firepower Threat Defense mode C. routed mode D. transparent mode

Discussion 0

Correct Answer: D Vote an answer

Question 13

A network administrator is migrating from a Cisco ASA to a Cisco FTD.
EIGRP is configured on the Cisco ASA but it is not available in the Cisco FMC.
Which action must the administrator take to enable this feature on the Cisco FTD?

A. Enable advanced configuration options in the FMC. B. Configure EIGRP parameters using FlexConfig objects. C. Add the command feature eigrp via the FTD CLI. D. Create a custom variable set and enable the feature in the variable set.

Discussion 0

Correct Answer: B Vote an answer

Question 14

A security analyst must create a new report within Cisco FMC to show an overview of the daily attacks, vulnerabilities, and connections. The analyst wants to reuse specific dashboards from other reports to create this consolidated one. Which action accomplishes this task?

A. Modify the Custom Workflows within the Cisco FMC to feed the desired data into the new report. B. Use the import feature in the newly created report to select which dashboards to add. C. Create a new dashboard object via Object Management to represent the desired views. D. Copy the Malware Report and modify the sections to pull components from other reports.

Discussion 0

Correct Answer: B Vote an answer

Question 15

A network administrator configured a NAT policy that translates a public IP address to an internal web server IP address. An access policy has also been created that allows any source to reach the public IP address on port 80. The web server is still not reachable from the Internet on port 80. Which configuration change is needed?

A. The NAT policy must be modified to translate the source IP address as well as destination IP address. B. The access policy must allow traffic to the internal web server IP address. C. The access policy rule must be configured for the action trust. D. The intrusion policy must be disabled for port 80.

Discussion 0

Correct Answer: B Vote an answer