Free 300-710 Sample Questions and 100% Cover Real Exam Questions (Updated 261 Questions)
Download Real Cisco 300-710 Exam Dumps Test Engine Exam Questions
NEW QUESTION 140
When do you need the file-size command option during troubleshooting with packet capture?
- A. when capture packets are restricted from the secondary memory
- B. when capture packets exceed 32 MB
- C. when capture packets exceed 10 GB
- D. when capture packets are less than 16 MB
Answer: B
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/troubleshooting_the_system.html
NEW QUESTION 141
What is a valid Cisco AMP file disposition?
- A. known-good
- B. malware
- C. non-malicious
- D. pristine
Answer: B
Explanation:
Section: Integration
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide- v60/Reference_a_wrapper_Chapter_topic_here.html
NEW QUESTION 142
While configuring FTD, a network engineer wants to ensure that traffic passing through the appliance does not require routing or Vlan rewriting. Which interface mode should the engineer implement to accomplish this task?
- A. transparent
- B. Inline tap
- C. Inline set
- D. passive
Answer: A
NEW QUESTION 143
An engineer currently has a Cisco FTD device registered to the Cisco FMC and is assigned the address of 10
10.50.12. The organization is upgrading the addressing schemes and there is a requirement to convert the addresses to a format that provides an adequate amount of addresses on the network What should the engineer do to ensure that the new addressing takes effect and can be used for the Cisco FTD to Cisco FMC connection?
- A. Format and reregister the device to Cisco FMC.
- B. Update the IP addresses from IFV4 to IPv6 without deleting the device from Cisco FMC
- C. Cisco FMC does not support devices that use IPv4 IP addresses.
- D. Delete and reregister the device to Cisco FMC
Answer: B
NEW QUESTION 144
What is a feature of Cisco AMP private cloud?
- A. It disables direct connections to the public cloud.
- B. It supports anonymized retrieval of threat intelligence
- C. It supports security intelligence filtering.
- D. It performs dynamic analysis
Answer: A
NEW QUESTION 145
Which object type supports object overrides?
- A. security group tag
- B. DNS server group
- C. time range
- D. network object
Answer: D
NEW QUESTION 146
Refer to the exhibit.
What is the effect of the existing Cisco FMC configuration?
- A. The remote management port for communication between the Cisco FMC and the managed device changes to port 8443.
- B. The managed device is deleted from the Cisco FMC.
- C. The management connection between the Cisco FMC and the Cisco FTD is disabled.
- D. The SSL-encrypted communication channel between the Cisco FMC and the managed device becomes plain-text communication channel.
Answer: C
NEW QUESTION 147
Which Firepower feature allows users to configure bridges in routed mode and enables devices to perform Layer 2 switching between interfaces?
- A. IRB
- B. BDI
- C. FlexConfig
- D. SGT
Answer: A
Explanation:
Section: Configuration
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/relnotes/ Firepower_System_Release_Notes_Version_620/new_features_and_functionality.html
NEW QUESTION 148
A network administrator reviews the file report for the last month and notices that all file types, except exe. show a disposition of unknown. What is the cause of this issue?
- A. A file policy has not been applied to the access policy.
- B. Only Spero file analysis is enabled.
- C. The Cisco FMC cannot reach the Internet to analyze files.
- D. The malware license has not been applied to the Cisco FTD.
Answer: D
NEW QUESTION 149
A network engineer wants to add a third-party threat feed into the Cisco FMC for enhanced threat detection Which action should be taken to accomplish this goal?
- A. Enable Threat Intelligence Director using STIX and TAXII
- B. Enable Rapid Threat Containment using REST APIs
- C. Enable Rapid Threat Containment using STIX and TAXII
- D. Enable Threat Intelligence Director using REST APIs
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/cisco_threat_intelligence_director__tid_.html
NEW QUESTION 150
With Cisco Firepower Threat Defense software, which interface mode must be configured to passively receive traffic that passes through the appliance?
- A. passive
- B. inline tap
- C. inline set
- D. routed
Answer: A
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/interface_overview_for_firepower_threat_defense.html
NEW QUESTION 151
Which protocol establishes network redundancy in a switched Firepower device deployment?
- A. GLBP
- B. STP
- C. HSRP
- D. VRRP
Answer: B
NEW QUESTION 152
Which report template field format is available in Cisco FMC?
- A. bar chart
- B. box lever chart
- C. benchmark chart
- D. arrow chart
Answer: A
Explanation:
Section: Management and Troubleshooting
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide- v60/Working_with_Reports.html
NEW QUESTION 153
A security engineer must deploy a Cisco FTD appliance as a bump in the wire to detect intrusion events without disrupting the flow of network traffic. Which two features must be configured to accomplish the task? (Choose two.)
- A. transparent mode
- B. tapemode
- C. passive interfaces
- D. bridged mode
- E. inline set pair
Answer: A,B
NEW QUESTION 154
An engineer is troubleshooting application failures through an FTD deployment. While using the FMC CLI, it has been determined that the traffic in question is not matching the desired policy. What should be done to correct this?
- A. Use the system support network-options command to fine tune the policy.
- B. Use the system support application-identification-debug command to determine which rules the traffic matching and modify the rule accordingly.
- C. Use the system support firewall-engine-dump-user-identity-data command to change the policy and allow the application though the firewall.
- D. Use the system support firewall-engine-debug command to determine which rules the traffic matching and modify the rule accordingly.
Answer: D
Explanation:
Section: Management and Troubleshooting
NEW QUESTION 155
When do you need the file-size command option during troubleshooting with packet capture?
- A. when capture packets are restricted from the secondary memory
- B. when capture packets exceed 32 MB
- C. when capture packets exceed 10 GB
- D. when capture packets are less than 16 MB
Answer: B
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/troubleshooting_the_system.html
NEW QUESTION 156
An administrator is optimizing the Cisco FTD rules to improve network performance, and wants to bypass inspection for certain traffic types to reduce the load on the Cisco FTD. Which policy must be configured to accomplish this goal?
- A. intrusion
- B. identity
- C. URL filtering
- D. prefilter
Answer: D
NEW QUESTION 157
Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?
- A. capture
- B. capture WORD
- C. capture-traffic
- D. configure coredump packet-engine enable
Answer: C
NEW QUESTION 158
Which command-line mode is supported from the Cisco Firepower Management Center CLI?
- A. admin
- B. configuration
- C. privileged
- D. user
Answer: B
NEW QUESTION 159
An administrator is working on a migration from Cisco ASA to the Cisco FTD appliance and needs to test the rules without disrupting the traffic. Which policy type should be used to configure the ASA rules during this phase of the migration?
- A. Access Control
- B. identity
- C. Intrusion
- D. Prefilter
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/migration-tool/migration-guide/ASA2FTD-with-FP-Migration-Tool/b_Migration_Guide_ASA2FTD_chapter_01011.html
NEW QUESTION 160
An engineer is setting up a new Firepower deployment and is looking at the default FMC policies to start the implementation. During the initial trial phase, the organization wants to test some common Snort rules while still allowing the majority of network traffic to pass. Which default policy should be used?
- A. Security Over Connectivity
- B. Balanced Security and Connectivity
- C. Connectivity Over Security
- D. Maximum Detection
Answer: C
Explanation:
Section: Deployment
NEW QUESTION 161
......
New 300-710 exam dumps Use Updated Cisco Exam: https://testking.itexamsimulator.com/300-710-brain-dumps.html
