Pre-Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Free Securing Networks with Cisco Firepower (300-710 SNCF) v1.2 Practice Questions

Question # 21

An administrator is working on a migration from Cisco ASA to the Cisco FTD appliance and needs to test the rules without disrupting the traffic. Which policy type should be used to configure the ASA rules during this phase of the migration?

Options:

A.  

identity

B.  

Intrusion

C.  

Access Control

D.  

Prefilter

Discussion 0
Question # 22

An engineer is restoring a Cisco FTD configuration from a remote backup using the command restore remote-manager-backup location 1.1.1.1 admin /volume/home/admin BACKUP_Cisc394602314.zip on a Cisco FM

G.  

After connecting to the repository, an error occurred that prevents the FTD device from accepting the backup file. What is the problem?

Options:

A.  

The backup file is not in .cfg format.

B.  

The backup file is too large for the Cisco FTD device

C.  

The backup file extension was changed from tar to zip

D.  

The backup file was not enabled prior to being applied

Discussion 0
Question # 23

An engineer must replace a Cisco Secure Firewall high-availability device due to a failure. When the replacement device arrives, the engineer must separate the high-availability pair from Cisco Secure Firewall Management Center Which action must the engineer take first to restore high availability?

Options:

A.  

Register the secondary device

B.  

Force a break between the devices.

C.  

Unregister the secondary device.

D.  

Configure NTP time synchronization.

Discussion 0
Question # 24

A network engineer is tasked with minimising traffic interruption during peak traffic limes. When the SNORT inspection engine is overwhelmed, what must be configured to alleviate this issue?

Options:

A.  

Enable IPS inline link state propagation

B.  

Enable Pre-filter policies before the SNORT engine failure.

C.  

Set a Trust ALL access control policy.

D.  

Enable Automatic Application Bypass.

Discussion 0
Question # 25

In which two places can thresholding settings be configured? (Choose two.)

Options:

A.  

on each IPS rule

B.  

globally, within the network analysis policy

C.  

globally, per intrusion policy

D.  

on each access control rule

E.  

per preprocessor, within the network analysis policy

Discussion 0
Question # 26

An analyst is reviewing the Cisco FMC reports for the week. They notice that some peer-to-peer applications are being used on the network and they must identify which poses the greatest risk to the environment. Which report gives the analyst this information?

Options:

A.  

Attacks Risk Report

B.  

User Risk Report

C.  

Network Risk Report

D.  

Advanced Malware Risk Report

Discussion 0
Question # 27

A network administrator reviews me attack risk report and notices several Low-Impact attacks. What does this type of attack indicate?

Options:

A.  

All attacks are listed as low until manually categorized.

B.  

The host is not vulnerable to those attacks.

C.  

The attacks are not dangerous to the network.

D.  

The host is not within the administrator ' s environment.

Discussion 0
Question # 28

An engineer is configuring URL filtering for a Cisco FTD device in Cisco FM

C.  

Users must receive a warning when they access http:/ ' www.Dac ' additstte.corn with the option of continuing to the website if they choose to. No other websites should be blacked. Which two actions must the engineer lake to meet these requirements? (Choose two.)

Options:

A.  

On the HTTP Responses tab of the access control policy editor, set the Block Response Page to Custom.

B.  

On the HTTP Responses tab of the access control policy editor, sot the Interactive Block Response Page to system-provided.

C.  

Configure the default action for the access control policy to Interactive Block.

D.  

Configure an access control rule that matches the Adult URL category and se: the action to interactive Block.

E.  

Configure an access control rule that matches an URL object for http://www.badaduitslte.com; and set the action to interactive Block.

Discussion 0
Question # 29

An engineer is troubleshooting application failures through a FTD deployment. While using the FMC CLI. it has been determined that the traffic in question is not matching the desired policy. What should be done to correct this?

Options:

A.  

Use the system support firewall-engine-debug command to determine which rules the traffic matchingand modify the rule accordingly

B.  

Use the system support application-identification-debug command to determine which rules the traffic matching and modify the rule accordingly

C.  

Use the system support firewall-engine-dump-user-f density-data command to change the policy and allow the application through the firewall.

D.  

Use the system support network-options command to fine tune the policy.

Discussion 0
Question # 30

When deploying a Cisco ASA Firepower module, an organization wants to evaluate the contents of the traffic without affecting the network. It is currently configured to have more than one instance of the same device on the physical appliance Which deployment mode meets the needs of the organization?

Options:

A.  

inline tap monitor-only mode

B.  

passive monitor-only mode

C.  

passive tap monitor-only mode

D.  

inline mode

Discussion 0

300-710 PDF

300-710 PDF (Printable)
$54.25
$154.99

300-710 Testing Engine

300-710 PDF (Printable)
$59.5
$169.99

300-710 PDF + Testing Engine

300-710 PDF (Printable)
$74.55
$212.99

Free Exams Sample Questions