Authentic 300-710 Dumps – Free PDF Questions to Pass [Q19-Q34]

4/5 - (1 vote)

Authentic 300-710 Dumps – Free PDF Questions to Pass

Guaranteed Accomplishment with Newest Oct-2022 FREE 300-710

Understanding the General Outline

Cisco 300-710 is a well-structured exam that aims at directional learning. It is divided into four main domains, and each of them is focused on a different skill set and imparts updated cognizance.

QUESTION 19
The event dashboard within the Cisco FMC has been inundated with low priority intrusion drop events, which are overshadowing high priority events. An engineer has been tasked with reviewing the policies and reducing the low priority events. Which action should be configured to accomplish this task?

generate events

drop packet

drop connection

drop and generate

QUESTION 20
An engineer is configuring a Cisco FTD appliance in IPS-only mode and needs to utilize fail-to-wire interfaces.
Which interface mode should be used to meet these requirements?

passive

routed

transparent

inline set

Section: Deployment
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config- guide-v63/inline_sets_and_passive_interfaces_for_firepower_threat_defense.html

QUESTION 21
Which two routing options are valid with Cisco Firepower Threat Defense? (Choose two.)

BGPv6

ECMP with up to three equal cost paths across multiple interfaces

ECMP with up to three equal cost paths across a single interface

BGPv4 in transparent firewall mode

BGPv4 with nonstop forwarding

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/601/configuration/guide/fpmc-config-guide-v601/fpmc-config-guide-v60_chapter_01100011.html#ID-2101-0000000e

QUESTION 22
An engineer is setting up a new Firepower deployment and is looking at the default FMC policies to start the implementation During the initial trial phase, the organization wants to test some common Snort rules while still allowing the majority of network traffic to pass Which default policy should be used?

Maximum Detection

Security Over Connectivity

Balanced Security and Connectivity

Connectivity Over Security

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/fdm/fptd-fdm-config-guide-623/fptd-fdm-intrusion.html

QUESTION 23
A network engineer is extending a user segment through an FTD device for traffic inspection without creating another IP subnet. How is this accomplished on an FTD device in routed mode?

by assigning an inline set interface

by using a BVI and creating a BVI IP address in the same subnet as the user segment

by leveraging the ARP to direct traffic through the firewall

by bypassing protocol inspection by leveraging pre-filter rules

Section: Deployment

QUESTION 24
Which two statements about bridge-group interfaces in Cisco FTD are true? (Choose two.)

The BVI IP address must be in a separate subnet from the connected network.

Bridge groups are supported in both transparent and routed firewall modes.

Bridge groups are supported only in transparent firewall mode.

Bidirectional Forwarding Detection echo packets are allowed through the FTD when using bridge-group members.

Each directly connected network must be on the same subnet.

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/transparent_or_routed_firewall_mode_for_firepower_threat_defense.html

QUESTION 25
An engineer is tasked with deploying an internal perimeter firewall that will support multiple DMZs Each DMZ has a unique private IP subnet range. How is this requirement satisfied?

Deploy the firewall in transparent mode with access control policies.

Deploy the firewall in routed mode with access control policies.

Deploy the firewall in routed mode with NAT configured.

Deploy the firewall in transparent mode with NAT configured.

QUESTION 26
In a multi-tennent deployment where multiple domains are in use. which update should be applied outside of the Global Domain?

minor upgrade

local import of intrusion rules

Cisco Geolocation Database

local import of major upgrade

QUESTION 27
Which firewall design allows a firewall to forward traffic at layer 2 and layer 3 for the same subnet?

Cisco Firepower Threat Defense mode

transparent mode

routed mode

integrated routing and bridging

QUESTION 28
Which Cisco Advanced Malware Protection for Endpoints policy is used only for monitoring endpoint actively?

Windows domain controller

audit

triage

protection

Reference:
https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/214933-amp-for-endpoints- deployment-methodology.html

QUESTION 29
An administrator must use Cisco FMC to install a backup route within the Cisco FTD to route traffic in case of a routing failure with the primary route. Which action accomplishes this task?

Install the static backup route and modify the metric to be less than the primary route.

Configure EIGRP routing on the FMC to ensure that dynamic routes are always updated.

Use a default route on the FMC instead of having multiple routes contending for priority.

Create the backup route and use route tracking on both routes to a destination IP address in the network.

QUESTION 30
What is the difference between inline and inline tap on Cisco Firepower?

Inline tap mode can send a copy of the traffic to another device.

Inline tap mode does full packet capture.

Inline mode cannot do SSL decryption.

Inline mode can drop malicious traffic.

Section: Deployment

QUESTION 31
A network administrator is seeing an unknown verdict for a file detected by Cisco FTD. Which malware policy configuration option must be selected in order to further analyse the file in the Talos cloud?

Spero analysis

Malware analysis

Dynamic analysis

Sandbox analysis

QUESTION 32
Which two routing options are valid with Cisco FTD? (Choose Two)

BGPv4 in transparent firewall mode

BGPv6

BGPv4 with nonstop forwarding

ECMP with up to three equal cost paths across a single interface

ECMP with up to three equal cost paths across multiple interfaces

QUESTION 33
An engineer is investigating connectivity problems on Cisco Firepower that is using service group tags. Specific devices are not being tagged correctly, which is preventing clients from using the proper policies when going through the firewall How is this issue resolved?

Use traceroute with advanced options.

Use Wireshark with an IP subnet filter.

Use a packet capture with match criteria.

Use a packet sniffer with correct filtering

QUESTION 34
What is a functionality of port objects in Cisco FMC?

to mix transport protocols when setting both source and destination port conditions in a rule

to represent protocols other than TCP, UDP, and ICMP

to represent all protocols in the same way

to add any protocol other than TCP or UDP for source port conditions in access control rules.

Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/reusable_objects.html

Loading …