Get Oct-2023 updated 300-710 Certification Exam Sample Questions [Q53-Q68]

4.5/5 - (2 votes)

Get Oct-2023 updated 300-710 Certification Exam Sample Questions

300-710 Study Guide Cover to Cover as Literally

NEW QUESTION 53

Refer to the exhibit. An engineer is analyzing a Network Risk Report from Cisco FMC. Which application must the engineer take immediate action against to prevent unauthorized network use?

Kerberos

YouTube

Chrome

TOR

NEW QUESTION 54
A network administrator is troubleshooting access to a website hosted behind a Cisco FTD device External clients cannot access the web server via HTTPS The IP address configured on the web server is 192 168 7.46 The administrator is running the command capture CAP interface outside match ip any 192.168.7.46 255.255.255.255 but cannot see any traffic in the capture Why is this occurring?

The capture must use the public IP address of the web server.

The FTD has no route to the web server.

The access policy is blocking the traffic.

The packet capture shows only blocked traffic

NEW QUESTION 55
In which two places can thresholding settings be configured? (Choose two.)

on each IPS rule

globally, within the network analysis policy

globally, per intrusion policy

on each access control rule

per preprocessor, within the network analysis policy

Section: Configuration
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa- firepower-module-user-guide-v541/Intrusion-Global-Threshold.pdf

NEW QUESTION 56
Refer to the exhibit.

An administrator is looking at some of the reporting capabilities for Cisco Firepower and noticed this section of the Network Risk report showing a lot of SSL activity that cloud be used for evasion. Which action will mitigate this risk?

Use SSL decryption to analyze the packets.

Use encrypted traffic analytics to detect attacks

Use Cisco AMP for Endpoints to block all SSL connection

Use Cisco Tetration to track SSL connections to servers.

NEW QUESTION 57
Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?

configure coredump packet-engine enable

capture-traffic

capture

capture WORD

Section: Management and Troubleshooting
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/command_ref/ b_Command_Reference_for_Firepower_Threat_Defense/ac_1.html

NEW QUESTION 58
Which CLI command is used to control special handling of ClientHello messages?

system support ssl-client-hello-tuning

system support ssl-client-hello-display

system support ssl-client-hello-force-reset

system support ssl-client-hello-enabled

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/firepower_command_line_reference.html

NEW QUESTION 59
What is a functionality of port objects in Cisco FMC?

to mix transport protocols when setting both source and destination port conditions in a rule

to represent protocols other than TCP, UDP, and ICMP

to represent all protocols in the same way

to add any protocol other than TCP or UDP for source port conditions in access control rules.

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/reusable_objects.html

NEW QUESTION 60
What is the benefit of selecting the trace option for packet capture?

The option indicates whether the packet was dropped or successful.

The option indicated whether the destination host responds through a different path.

The option limits the number of packets that are captured.

The option captures details of each packet.

Section: Management and Troubleshooting
Explanation/Reference:

NEW QUESTION 61
When deploying a Cisco ASA Firepower module, an organization wants to evaluate the contents of the traffic without affecting the network. It is currently configured to have more than one instance of the same device on the physical appliance Which deployment mode meets the needs of the organization?

inline tap monitor-only mode

passive monitor-only mode

passive tap monitor-only mode

inline mode

https://www.cisco.com/c/en/us/td/docs/security/asa/asa910/configuration/firewall/asa-910-firewall-config/access-sfr.html Inline tap monitor-only mode (ASA inline)-In an inline tap monitor-only deployment, a copy of the traffic is sent to the ASA FirePOWER module, but it is not returned to the ASA. Inline tap mode lets you see what the ASA FirePOWER module would have done to traffic, and lets you evaluate the content of the traffic, without impacting the network. However, in this mode, the ASA does apply its policies to the traffic, so traffic can be dropped due to access rules, TCP normalization, and so forth.

NEW QUESTION 62
A network administrator is implementing an active/passive high availability Cisco FTD pair.
When adding the high availability pair, the administrator cannot select the secondary peer.
What is the cause?

The second Cisco FTD is not the same model as the primary Cisco FTD.

An high availability license must be added to the Cisco FMC before adding the high availability pair.

The failover link must be defined on each Cisco FTD before adding the high availability pair.

Both Cisco FTD devices are not at the same software Version

NEW QUESTION 63
Which Cisco Firepower feature is used to reduce the number of events received in a period of time?

rate-limiting

suspending

correlation

thresholding

Section: Management and Troubleshooting
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa- firepower-module-user-guide-v541/Intrusion-Global-Threshold.html

NEW QUESTION 64
Drag and drop the configuration steps from the left into the sequence on the right to enable external authentication on Cisco FMC to a RADIUS server.

NEW QUESTION 65
Due to an Increase in malicious events, a security engineer must generate a threat report to include intrusion events, malware events, and security intelligence events. How Is this information collected in a single report?

Run the default Firepower report.

Export the Attacks Risk report.

Generate a malware report.

Create a Custom report.

NEW QUESTION 66
Which two dynamic routing protocols are supported in Firepower Threat Defense without using FlexConfig?
(Choose two.)

EIGRP

OSPF

static routing

IS-IS

BGP

Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/660/fdm/fptd-fdm-config-guide-660/fptd-fdm-routing.html

NEW QUESTION 67
What are the minimum requirements to deploy a managed device inline?

inline interfaces, security zones, MTU, and mode

passive interface, MTU, and mode

inline interfaces, MTU, and mode

passive interface, security zone, MTU, and mode

NEW QUESTION 68
A security engineer is adding three Cisco FTD devices to a Cisco FMC. Two of the devices have successfully registered to the Cisco FMC. The device that is unable to register is located behind a router that translates all outbound traffic to the router’s WAN IP address. Which two steps are required for this device to register to the Cisco FMC? (Choose two.)

Reconfigure the Cisco FMC lo use the device’s private IP address instead of the WAN address.

Configure a NAT ID on both the Cisco FMC and the device.

Add the port number being used for PAT on the router to the device’s IP address in the Cisco FMC.

Reconfigure the Cisco FMC to use the device’s hostname instead of IP address.

Remove the IP address defined for the device in the Cisco FMC.

Loading …