Pre-Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Free Securing Networks with Cisco Firepower (300-710 SNCF) v1.2 Practice Questions

Question # 61

An engineer is troubleshooting HTTP traffic to a web server using the packet capture tool on Cisco FM

C.  

When reviewing the captures, the engineer notices that there are a lot of packets that are not sourced from or destined to the web server being captured. How can the engineer reduce the strain of capturing packets for irrelevant traffic on the Cisco FTD device?

Options:

A.  

Use the host filter in the packet capture to capture traffic to or from a specific host.

B.  

Redirect the packet capture output to a. pcap file that can be opened with Wireshark.

C.  

Use the -c option to restrict the packet capture to only the first 100 packets.

D.  

Use an access-list within the packet capture to permit only HTTP traffic to and from the web server.

Discussion 0
Question # 62

Which command is run on an FTD unit to associate the unit to an FMC manager that is at IP address 10.0.0.10, and that has the registration key Cisco123?

Options:

A.  

configure manager local 10.0.0.10 Cisco123

B.  

configure manager add Cisco123 10.0.0.10

C.  

configure manager local Cisco123 10.0.0.10

D.  

configure manager add 10.0.0.10 Cisco123

Discussion 0
Question # 63

An engineer is setting up a remote access VPN on a Cisco FTD device and wants to define which traffic gets sent over the VPN tunnel. Which named object type in Cisco FMC must be used to accomplish this task?

Options:

A.  

split tunnel

B.  

crypto map

C.  

access list

D.  

route map

Discussion 0
Question # 64

A network administrator configured a NAT policy that translates a public IP address to an internal web server IP address. An access policy has also been created that allows any source to reach the public IP address on port 80. The web server is still not reachable from the Internet on port 80. Which configuration change is needed?

Options:

A.  

The intrusion policy must be disabled for port 80.

B.  

The access policy rule must be configured for the action trust.

C.  

The NAT policy must be modified to translate the source IP address as well as destination IP address.

D.  

The access policy must allow traffic to the internal web server IP address.

Discussion 0
Question # 65

Which two solutions are used to access and view aggregated log data from the firewalls using Cisco Security Analytics and Logging? (Choose two.)

Options:

A.  

Cisco Secure Network Analytics

B.  

Cisco Defense Orchestrator

C.  

Cisco Catalyst Center

D.  

Secure Cloud Analytics

E.  

Cisco Prime Infrastructure

Discussion 0
Question # 66

Which CLI command is used to generate firewall debug messages on a Cisco Firepower?

Options:

A.  

system support firewall-engine-debug

B.  

system support ssl-debug

C.  

system support platform

D.  

system support dump-table

Discussion 0
Question # 67

A hospital network needs to upgrade their Cisco FMC managed devices and needs to ensure that a disaster recovery process is in place. What must be done in order to minimize downtime on the network?

Options:

A.  

Configure a second circuit to an ISP for added redundancy

B.  

Keep a copy of the current configuration to use as backup

C.  

Configure the Cisco FMCs for failover

D.  

Configure the Cisco FMC managed devices for clustering.

Discussion 0
Question # 68

What is a feature of Cisco AMP private cloud?

Options:

A.  

It supports anonymized retrieval of threat intelligence

B.  

It supports security intelligence filtering.

C.  

It disables direct connections to the public cloud.

D.  

It performs dynamic analysis

Discussion 0
Question # 69

Which feature within the Cisco FMC web interface allows for detecting, analyzing and blocking malware in network traffic?

Options:

A.  

intrusion and file events

B.  

Cisco AMP for Endpoints

C.  

Cisco AMP for Networks

D.  

file policies

Discussion 0
Question # 70

An administrator is optimizing the Cisco FTD rules to improve network performance, and wants to bypass inspection for certain traffic types to reduce the load on the Cisco FT

D.  

Which policy must be configured to accomplish this goal?

Options:

A.  

prefilter

B.  

intrusion

C.  

identity

D.  

URL filtering

Discussion 0

300-710 PDF

300-710 PDF (Printable)
$54.25
$154.99

300-710 Testing Engine

300-710 PDF (Printable)
$59.5
$169.99

300-710 PDF + Testing Engine

300-710 PDF (Printable)
$74.55
$212.99

Free Exams Sample Questions