Pre-Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Free Securing Networks with Cisco Firepower (300-710 SNCF) v1.2 Practice Questions

Question # 111

A Cisco FTD has two physical interfaces assigned to a BVI. Each interface is connected to a different VLAN on the same switch. Which firewall mode is the Cisco FTD set up to support?

Options:

A.  

active/active failover

B.  

transparent

C.  

routed

D.  

high availability clustering

Discussion 0
Question # 112

Encrypted Visibility Engine (EVE) is enabled under which lab on an access control policy in Cisco Secure Firewall Management Centre?

Options:

A.  

Network Analysis Policy

B.  

Advanced

C.  

Security Intelligence

D.  

SSL

Discussion 0
Question # 113

Refer to the exhibit.

A systems administrator conducts a connectivity test to their SCCM server from a host machine and gets no response from the server. Which action ensures that the ping packets reach the destination and that the host receives replies?

Options:

A.  

Create an access control policy rule that allows ICMP traffic.

B.  

Configure a custom Snort signature to allow ICMP traffic after Inspection.

C.  

Modify the Snort rules to allow ICMP traffic.

D.  

Create an ICMP allow list and add the ICMP destination to remove it from the implicit deny list.

Discussion 0
Question # 114

Which file format can standard reports from Cisco Secure Firewall Management Center be downloaded in?

Options:

A.  

ppt

B.  

csv

C.  

xis

D.  

doc

Discussion 0
Question # 115

An engineer is deploying failover capabilities for a pair of Cisco Secure Firewall devices. The core switch keeps the MAC address of the previously active unit in the ARP table. Which action must the engineer take to minimize downtime and ensure that network users keep access to the internet after a Cisco Secure Firewall failover?

Options:

A.  

Set the same MAC address on both units.

B.  

Add the MAC address to the switch ARP table.

C.  

Run a script to send gratuitous ARP after a failover.

D.  

Use a virtual MAC address on both units.

Discussion 0
Question # 116

In a Cisco AMP for Networks deployment, which disposition is returned if the cloud cannot be reached?

Options:

A.  

unavailable

B.  

unknown

C.  

clean

D.  

disconnected

Discussion 0
Question # 117

Which object type supports object overrides?

Options:

A.  

time range

B.  

security group tag

C.  

network object

D.  

DNS server group

Discussion 0
Question # 118

The network administrator wants to enhance the network security posture by enabling machine learning tor malware detection due to a concern with suspicious Microsoft executable file types that were seen while creating monthly security reports for the CIO. Which feature must be enabled to accomplish this goal?

Options:

A.  

Spero

B.  

dynamic analysis

C.  

static analysis

D.  

Ethos

Discussion 0
Question # 119

Question # 119

Refer to the exhibit. Authenticated VPN users at a financial institution can reach trading servers in the 10.200.0.0/16 range, but one user, vpn-useM is not able to access the trading application at 10.200.5.50 on TCP 8443. An engineer enables system support trace on the Cisco Secure Firewall Threat Defense. Which action must be performed to resolve the issue?

Options:

A.  

Modify the group policy to assign a higher-privilege VPN filter ACL to all users in vpn-user1 ' s group, overriding the ACL applied by DAP.

B.  

Edit the group policy for the VPN tunnel group and permit 10.200.5.50/8443 in the split-tunnel ACL.

C.  

Update the DAP RESTRICT_TRADING ACL to permit TCP to 10.200.5.50 on port 8443.

D.  

Add a static route for 10.200.5.0/24 pointing to the inside interface, and a static route for the vpn-user1 host 172.16.100.10 to the outside interface.

Discussion 0
Question # 120

Question # 120

Refer to the exhibit. Users attempt to connect to numerous external resources on various TCP ports. If the users mistype the port, their connection closes immediately, and it takes more than one minute before the connection is torn down. An engineer manages to capture both types of connections as shown in the exhibit. What must the engineer configure to lower the timeout values for the second group of connections and resolve the user issues?

Options:

A.  

Outbound access rule with the Block with reset action

B.  

Outbound access rule that allows the entire ICMP protocol suite

C.  

Inbound access rule that allows TCP reset packets from outside

Discussion 0

300-710 PDF

300-710 PDF (Printable)
$54.25
$154.99

300-710 Testing Engine

300-710 PDF (Printable)
$59.5
$169.99

300-710 PDF + Testing Engine

300-710 PDF (Printable)
$74.55
$212.99

Free Exams Sample Questions