Top Tips Of Up To Date 300-710 Exam Answers

NEW QUESTION 1

A security analyst must create a new report within Cisco FMC to show an overview of the daily attacks, vulnerabilities, and connections. The analyst wants to reuse specific dashboards from other reports to create this consolidated one. Which action accomplishes this task?

• A. Create a new dashboard object via Object Management to represent the desired views.
• B. Modify the Custom Workflows within the Cisco FMC to feed the desired data into the new report.
• C. Copy the Malware Report and modify the sections to pull components from other reports.
• D. Use the import feature in the newly created report to select which dashboards to add.

Answer: D

NEW QUESTION 2

Which protocol establishes network redundancy in a switched Firepower device deployment?

• A. STP
• B. HSRP
• C. GLBP
• D. VRRP

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/firepower_threat_defense_high_availability.html

NEW QUESTION 3

Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?

• A. configure coredump packet-engine enable
• B. capture-traffic
• C. capture
• D. capture WORD

Answer: C

Explanation:
Reason: the command "capture-traffic" is used for SNORT Engine Captures. To capture a LINA Engine Capture, you use the "capture" command. Since the Lina Engine represents the actual physical interface of the device, "capture" is the only reasonable choice Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212474-working-with-firepower-threat-de
The command is firepower# capture DMZ interface dmz trace detail match ip host 192.168.76.14 host 192.168.76.100 firepower# capture INSIDE interface inside trace detail match ip host 192.168.76.14 host 192.168.75.14

NEW QUESTION 4

What is the benefit of selecting the trace option for packet capture?

• A. The option indicates whether the packet was dropped or successful.
• B. The option indicated whether the destination host responds through a different path.
• C. The option limits the number of packets that are captured.
• D. The option captures details of each packet.

Answer: A

NEW QUESTION 5

With Cisco FTD software, which interface mode must be configured to passively receive traffic that passes through the appliance?

• A. ERSPAN
• B. IPS-only
• C. firewall
• D. tap

Answer: A

NEW QUESTION 6

An engineer wants to change an existing transparent Cisco FTD to routed mode.
The device controls traffic between two network segments. Which action is mandatory to allow hosts to reestablish communication between these two segments after the change?

• A. remove the existing dynamic routing protocol settings.
• B. configure multiple BVIs to route between segments.
• C. assign unique VLAN IDs to each firewall interface.
• D. implement non-overlapping IP subnets on each segment.

Answer: D

NEW QUESTION 7

An engineer installs a Cisco FTD device and wants to inspect traffic within the same subnet passing through a firewall and inspect traffic destined to the internet.
Which configuration will meet this requirement?

• A. transparent firewall mode with IRB only
• B. routed firewall mode with BVI and routed interfaces
• C. transparent firewall mode with multiple BVIs
• D. routed firewall mode with routed interfaces only

Answer: C

NEW QUESTION 8

Refer to the exhibit.

An engineer is modifying an access control policy to add a rule to Inspect all DNS traffic that passes it making the change and deploying the policy, they see that DNS traffic Is not being Inspected by the Snort engine. What is......

• A. The action of the rule is set to trust instead of allow.
• B. The rule must specify the security zone that originates the traffic.
• C. The rule Is configured with the wrong setting for the source port.
• D. The rule must define the source network for inspection as well as the port.

Answer: A

NEW QUESTION 9

The CEO ask a network administrator to present to management a dashboard that shows custom analysis tables for the top DNS queries URL category statistics, and the URL reputation statistics.
Which action must the administrator take to quickly produce this information for management?

• A. Run the Attack report and filter on DNS to show this information.
• B. Create a new dashboard and add three custom analysis widgets that specify the tables needed.
• C. Modify the Connection Events dashboard to display the information in a view for management.
• D. Copy the intrusion events dashboard tab and modify each widget to show the correct charts.

Answer: B

NEW QUESTION 10

A network engineer wants to add a third-party threat feed into the Cisco FMC for enhanced threat detection Which action should be taken to accomplish this goal?

• A. Enable Threat Intelligence Director using STIX and TAXII
• B. Enable Rapid Threat Containment using REST APIs
• C. Enable Threat Intelligence Director using REST APIs
• D. Enable Rapid Threat Containment using STIX and TAXII

Answer: A

NEW QUESTION 11

An organization is configuring a new Cisco Firepower High Availability deployment. Which action must be taken to ensure that failover is as seamless as possible to end users?

• A. Set up a virtual failover MAC address between chassis.
• B. Use a dedicated stateful link between chassis.
• C. Load the same software version on both chassis.
• D. Set the same FQDN for both chassis.

Answer: B

NEW QUESTION 12

An engineer is tasked with deploying an internal perimeter firewall that will support multiple DMZs Each DMZ has a unique private IP subnet range. How is this requirement satisfied?

• A. Deploy the firewall in transparent mode with access control policies.
• B. Deploy the firewall in routed mode with access control policies.
• C. Deploy the firewall in routed mode with NAT configured.
• D. Deploy the firewall in transparent mode with NAT configured.

Answer: C

Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/intro-fw.

NEW QUESTION 13

Which action must be taken on the Cisco FMC when a packet bypass is configured in case the Snort engine is down or a packet takes too long to process?

• A. Enable Inspect Local Router Traffic
• B. Enable Automatic Application Bypass
• C. Configure Fastpath rules to bypass inspection
• D. Add a Bypass Threshold policy for failures

Answer: B

NEW QUESTION 14

What is the maximum bit size that Cisco FMC supports for HTTPS certificates?

• A. A.-1024B.8192C.4096D.2048

Answer: C

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config- guide-v61/system_configuration.html

NEW QUESTION 15

An engineer is troubleshooting connectivity to the DNS servers from hosts behind a new Cisco FTD device. The hosts cannot send DNS queries to servers in the DMZ. Which action should the engineer take to troubleshoot this issue using the real DNS packets?

• A. Use the Connection Events dashboard to check the block reason and adjust the inspection policy as needed.
• B. Use the packet capture tool to check where the traffic is being blocked and adjust the access control or intrusion policy as needed.
• C. Use the packet tracer tool to determine at which hop the packet is being dropped.
• D. Use the show blocks command in the Threat Defense CLI tool and create a policy to allow the blockedtraffic.

Answer: A

NEW QUESTION 16

An organization is migrating their Cisco ASA devices running in multicontext mode to Cisco FTD devices. Which action must be taken to ensure that each context on the Cisco ASA is logically separated in the Cisco FTD devices?

• A. Add a native instance to distribute traffic to each Cisco FTD context.
• B. Add the Cisco FTD device to the Cisco ASA port channels.
• C. Configure a container instance in the Cisco FTD for each context in the Cisco ASA.
• D. Configure the Cisco FTD to use port channels spanning multiple networks.

Answer: C

NEW QUESTION 17

Drag and drop the steps to restore an automatic device registration failure on the standby Cisco FMC from the left into the correct order on the right. Not all options are used.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 18

An engineer must configure a Cisco FMC dashboard in a multidomain deployment Which action must the engineer take to edit a report template from an ancestor domain?

• A. Add it as a separate widget.
• B. Copy it to the current domain
• C. Assign themselves ownership of it
• D. Change the document attributes.

Answer: B

NEW QUESTION 19
......