Pre-Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Free Securing Networks with Cisco Firepower (300-710 SNCF) v1.2 Practice Questions

Question # 81

A network administrator must send management a daily email report describing changes made during the previous 24 hours in Cisco Secure Firewall Management Center. Which system setting must be enabled?

Options:

A.  

STIG Compliance

B.  

Send Audit Log to Syslog

C.  

Change Reconciliation

D.  

Send Audit Log to HTTP Server

Discussion 0
Question # 82

An engineer must configure a correlation policy in Cisco Secure Firewall Management Center to detect when an IP address from an internal network communicates with a known malicious host. Connections made by the internal IP addresses must be tracked, and an external dynamic list must be used for the condition. Which type of event must the engineer configure on the correlation policy?

Options:

A.  

Intrusion Impact Alert

B.  

Connection tracker

C.  

Network discovery

D.  

Malware

Discussion 0
Question # 83

An organization created a custom application that is being flagged by Cisco Secure Endpoint. The application must be exempt from being flagged. What is the process to meet the requirement?

Options:

A.  

Modify the custom detection list to exclude me custom application.

B.  

Preculculate the hash value of the custom application and add it to the allowed applications.

C.  

Configure the custom application to use the information-store paths.

D.  

Add the custom application to the DFC 1st and update the policy.

Discussion 0
Question # 84

A network security engineer must export packet captures from the Cisco FMC web browser while troubleshooting an issue. When navigating to the address https:// < FMC IP > /capture/CAPI/pcap/test.pcap. an error 403: Forbidden is given instead of the PCAP file. Which action must the engineer take to resolve this issue?

Options:

A.  

Disable the HTTPS server and use HTTP instead.

B.  

Enable the HTTPS server for the device platform policy.

C.  

Disable the proxy setting on the browser.

D.  

Use the Cisco FTD IP address as the proxy server setting on the browser.

Discussion 0
Question # 85

An engineer is optimizing an Secure IPS in Cisco Secure Firewall Management Center to reduce false positives. Security with operational efficiency must be balanced. What must the engineer configure to balance security with operational efficiency?

Options:

A.  

Apply a combination of rule filters that use keywords and arguments to focus on relevant rules and settings for the network.

B.  

Create event notification filters to limit the logging and display of events based on frequency within a specified time period

C.  

Implement event suppression for specified IP addresses or ranges to focus on legitimate attacks and reduce irrelevant notifications.

D.  

Set dynamic rule state to adjust actions based on match rates over time in response to abnormal traffic patterns without overwhelming alerts.

Discussion 0
Question # 86

Which two conditions must be met to enable high availability between two Cisco FTD devices? (Choose two.)

Options:

A.  

same flash memory size

B.  

same NTP configuration

C.  

same DHCP/PPoE configuration

D.  

same host name

E.  

same number of interfaces

Discussion 0
Question # 87

An engineer is using the configure manager add < FMC IP > Cisc402098527 command to add a new Cisco FTD device to the Cisco FMC; however, the device is not being added. Why Is this occurring?

Options:

A.  

The NAT ID is required since the Cisco FMC is behind a NAT device.

B.  

The IP address used should be that of the Cisco FT

D.  

not the Cisco FM

C.  

C.  

DONOTRESOLVE must be added to the command

D.  

The registration key is missing from the command

Discussion 0
Question # 88

An administrator is attempting to add a new FTD device to their FMC behind a NAT device with a NAT ID of NAT001 and a password of Cisco0420l06525. The private IP address of the FMC server is 192.168.45.45. which is being translated to the public IP address of 209.165.200.225/27. Which command set must be used in order to accomplish this task?

Options:

A.  

configure manager add 209.165.200.225 < reg_key > < nat_id >

B.  

configure manager add 192.168.45,45 < reg_key > < nat_id >

C.  

configure manager add 209.165.200.225 255.255.255.224 < reg_key > < nat_id >

D.  

configure manager add 209.165.200.225/27 < reg_key > < nat_id >

Discussion 0
Question # 89

Which action must be taken to configure an isolated bridge group for IRB mode on a Cisco Secure Firewall device?

Options:

A.  

Add the restricted segment to the ACL.

B.  

Leave BVI interface name empty.

C.  

Define the NAT pool for the blocked traffic.

D.  

Remove the route from the routing table.

Discussion 0
Question # 90

An engineer must integrate a third-party security intelligence feed with Cisco Secure Firewall Management Center. Secure Firewall Management Center is running Version 6.2.3 and has 8

GB of memory. Which two actions must be taken to implement Threat Intelligence Director? (Choose two.)

Options:

A.  

Enable REST API access.

B.  

Add a TAXII server.

C.  

Add the URL of the TAXII server.

D.  

Upgrade to version 6.6.

E.  

Add 7 GB of memory.

Discussion 0

300-710 PDF

300-710 PDF (Printable)
$54.25
$154.99

300-710 Testing Engine

300-710 PDF (Printable)
$59.5
$169.99

300-710 PDF + Testing Engine

300-710 PDF (Printable)
$74.55
$212.99

Free Exams Sample Questions