Pre-Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Free Securing Networks with Cisco Firepower (300-710 SNCF) v1.2 Practice Questions

Question # 51

An engineer is investigating connectivity problems on Cisco Firepower that is using service group tags. Specific devices are not being tagged correctly, which is preventing clients from using the proper policies when going through the firewall How is this issue resolved?

Options:

A.  

Use traceroute with advanced options.

B.  

Use Wireshark with an IP subnet filter.

C.  

Use a packet capture with match criteria.

D.  

Use a packet sniffer with correct filtering

Discussion 0
Question # 52

A network administrator observes an attempted attack from a specific IP address in Cisco Secure Firewall Management Center. Which Cisco security tool can be used directly from the Secure Firewall Management Center web interface to obtain additional information about the IP address?

Options:

A.  

Cisco Threat Response browser plugin

B.  

Cisco Secure Network Analytics

C.  

Cisco Identity Services Engine

D.  

Cisco Secure Endpoint

Discussion 0
Question # 53

Which two statements about bridge-group interfaces in Cisco FTD are true? (Choose two.)

Options:

A.  

The BVI IP address must be in a separate subnet from the connected network.

B.  

Bridge groups are supported in both transparent and routed firewall modes.

C.  

Bridge groups are supported only in transparent firewall mode.

D.  

Bidirectional Forwarding Detection echo packets are allowed through the FTD when using bridge-group members.

E.  

Each directly connected network must be on the same subnet.

Discussion 0
Question # 54

An engineer is configuring a new Cisco Secure Firewall Management Center appliance. Secure Firewall Management Center must report on peer-to-peer applications used on the network and identify which applications pose the greatest risk to the network. Which template must the engineer configure to generate the report?

Options:

A.  

Advanced Malware Risk Report

B.  

User Risk Report

C.  

Attacks Risk Report

D.  

Network Risk Report

Discussion 0
Question # 55

Cisco Security Analytics and Logging SaaS licenses come with how many days of data retention by default?

Options:

A.  

60

B.  

365

C.  

90

D.  

120

Discussion 0
Question # 56

An engineer wants to perform a packet capture on the Cisco FTD to confirm that the host using IP address 192 168.100.100 has the MAC address of 0042 7734.103 to help troubleshoot aconnectivity issue What is the correct tcpdump command syntax to ensure that the MAC address appears in the packet capture output?

Options:

A.  

-nm src 192.168.100.100

B.  

-ne src 192.168.100.100

C.  

-w capture.pcap -s 1518 host 192.168.100.100 mac

D.  

-w capture.pcap -s 1518 host 192.168.100.100 ether

Discussion 0
Question # 57

A network administrator is trying to configure Active Directory authentication for VPN authentication to a Cisco Secure Firewall Threat Defence instance that is registered with Cisco Secure Firewall Management Center. Which system settings must be configured first in Secure Firewall Management Center to accomplish the goal?

Options:

A.  

Device, Remote Access VPN

B.  

System, Realms

C.  

Policies, Authentication

D.  

Authentication, Device

Discussion 0
Question # 58

Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?

Options:

A.  

configure coredump packet-engine enable

B.  

capture-traffic

C.  

capture

D.  

capture WORD

Discussion 0
Question # 59

A financial services firm is configuring split-tunnel remote access VPN on a Cisco Secure Firewall Threat Defence managed by Cisco Secure Firewall Management Center. Only traffic to 10.0 0.0/8 and 172 16 0 0/12 must traverse the VPN tunnel Internet traffic must exit locally on the client. Internal DNS queries must traverse the VPN tunnel to the corporate DNS server at 10.1.1.53 for the domain corp.finserv.local. Cisco Secure Client is deployed on all endpoints. Which configuration must be done to accomplish the task?

Options:

A.  

Implement a split-tunnel exclude list for all public address space, assign 10.1 1 53 as the primary DNS server in the group policy, and enable the Umbrella Roaming Security module to handle DNS queries for non-tunneled traffic.

B.  

Configure a split-tunnel include policy scoped to 10.0.0.0/8 and 172.16.0.0/12 in the group policy, and define a split-DNS entry for corp.finserv.local so Secure Client routes matching DNS queries through the tunnel to 10.1.1.53.

C.  

Enable full-tunnel mode in the group policy and apply an ACL permitting only RFC-1918 traffic into the tunnel, then assign 10.1.1.53 as the primary DNS server and rely on the Windows DNS suffix search list to handle internal resolution.

D.  

Use a network object group containing 10.0.0.0/8 and 172.16.0.0/12 as the split-tunnel include list, assign 8.8.8.8 as the primary DNS server in the group policy, and configure a conditional DNS forwarder on the client for corp finserv.local

Discussion 0
Question # 60

Which two types of objects are reusable and supported by Cisco FMC? (Choose two.)

Options:

A.  

dynamic key mapping objects that help link HTTP and HTTPS GET requests to Layer 7 application protocols.

B.  

reputation-based objects that represent Security Intelligence feeds and lists, application filters based on category and reputation, and file lists

C.  

network-based objects that represent IP address and networks, port/protocols pairs, VLAN tags, security zones, and origin/destination country

D.  

network-based objects that represent FQDN mappings and networks, port/protocol pairs, VXLAN tags, security zones and origin/destination country

E.  

reputation-based objects, such as URL categories

Discussion 0

300-710 PDF

300-710 PDF (Printable)
$54.25
$154.99

300-710 Testing Engine

300-710 PDF (Printable)
$59.5
$169.99

300-710 PDF + Testing Engine

300-710 PDF (Printable)
$74.55
$212.99

Free Exams Sample Questions