What Simulation 300-710 Free Exam Questions Is

NEW QUESTION 1

Which two remediation options are available when Cisco FMC is integrated with Cisco ISE? (Choose two.)

• A. dynamic null route configured
• B. DHCP pool disablement
• C. quarantine
• D. port shutdown
• E. host shutdown

Answer: CD

Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/210524-configure- firepower-6-1-pxgrid-remediati.html

NEW QUESTION 2

What is a valid Cisco AMP file disposition?

• A. non-malicious
• B. malware
• C. known-good
• D. pristine

Answer: B

Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide- v60/Reference_a_wrapper_Chapter_topic_here.html

NEW QUESTION 3

Which connector is used to integrate Cisco ISE with Cisco FMC for Rapid Threat Containment?

• A. pxGrid
• B. FTD RTC
• C. FMC RTC
• D. ISEGrid

Answer: A

NEW QUESTION 4

Network traffic coining from an organization's CEO must never be denied. Which access control policy configuration option should be used if the deployment engineer is not permitted to create a rule to allow all traffic?

• A. Configure firewall bypass.
• B. Change the intrusion policy from security to balance.
• C. Configure a trust policy for the CEO.
• D. Create a NAT policy just for the CEO.

Answer: C

NEW QUESTION 5

An organization has a Cisco IPS running in inline mode and is inspecting traffic for malicious activity. When traffic is received by the Cisco IRS, if it is not dropped, how does the traffic get to its destination?

• A. It is retransmitted from the Cisco IPS inline set.
• B. The packets are duplicated and a copy is sent to the destination.
• C. It is transmitted out of the Cisco IPS outside interface.
• D. It is routed back to the Cisco ASA interfaces for transmission.

Answer: A

NEW QUESTION 6



Refer to the exhibit. An engineer is analyzing a Network Risk Report from Cisco FMC. Which application must the engineer take immediate action against to prevent unauthorized network use?

• A. Kerberos
• B. YouTube
• C. Chrome
• D. TOR

Answer: D

NEW QUESTION 7

An administrator is optimizing the Cisco FTD rules to improve network performance, and wants to bypass inspection for certain traffic types to reduce the load on the Cisco FTD. Which policy must be configured to accomplish this goal?

• A. prefilter
• B. intrusion
• C. identity
• D. URL filtering

Answer: A

NEW QUESTION 8

Which two routing options are valid with Cisco Firepower Threat Defense? (Choose two.)

• A. BGPv6
• B. ECMP with up to three equal cost paths across multiple interfaces
• C. ECMP with up to three equal cost paths across a single interface
• D. BGPv4 in transparent firewall mode
• E. BGPv4 with nonstop forwarding

Answer: AC

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/601/configuration/guide/fpmc-config- guide-v601/fpmc-config-guide-v60_chapter_01100011.html#ID-2101-0000000e

NEW QUESTION 9

A network administrator cannot select the link to be used for failover when configuring an active/passive HA Cisco FTD pair.
Which configuration must be changed before setting up the high availability pair?

• A. An IP address in the same subnet must be added to each Cisco FTD on the interface.
• B. The interface name must be removed from the interface on each Cisco FTD.
• C. The name Failover must be configured manually on the interface on each cisco FTD.
• D. The interface must be configured as part of a LACP Active/Active EtherChannel.

Answer: A

NEW QUESTION 10

The network administrator wants to enhance the network security posture by enabling machine learning tor malware detection due to a concern with suspicious Microsoft executable file types that were seen while creating monthly security reports for the CIO. Which feature must be enabled to accomplish this goal?

• A. Spero
• B. dynamic analysis
• C. static analysis
• D. Ethos

Answer: A

NEW QUESTION 11

A Cisco FTD has two physical interfaces assigned to a BVI. Each interface is connected to a different VLAN on the same switch. Which firewall mode is the Cisco FTD set up to support?

• A. active/active failover
• B. transparent
• C. routed
• D. high availability clustering

Answer: B

NEW QUESTION 12

An engineer integrates Cisco FMC and Cisco ISE using pxGrid. Which role is assigned for Cisco FMC?

• A. controller
• B. publisher
• C. client
• D. server

Answer: C

NEW QUESTION 13

A network administrator is trying to convert from LDAP to LDAPS for VPN user authentication on a Cisco FTD. Which action must be taken on the Cisco FTD objects to accomplish this task?

• A. Add a Key Chain object to acquire the LDAPS certificate.
• B. Create a Certificate Enrollment object to get the LDAPS certificate needed.
• C. Identify the LDAPS cipher suite and use a Cipher Suite List object to define the Cisco FTD connection requirements.
• D. Modify the Policy List object to define the session requirements for LDAPS.

Answer: B

NEW QUESTION 14

A VPN user is unable to conned lo web resources behind the Cisco FTD device terminating the connection. While troubleshooting, the network administrator determines that the DNS responses are not getting through the Cisco FTD What must be done to address this issue while still utilizing Snort IPS rules?

• A. Uncheck the "Drop when Inline" box in the intrusion policy to allow the traffic.
• B. Modify the Snort rules to allow legitimate DNS traffic to the VPN users.
• C. Disable the intrusion rule threshes to optimize the Snort processing.
• D. Decrypt the packet after the VPN flow so the DNS queries are not inspected

Answer: B

NEW QUESTION 15

What is the disadvantage of setting up a site-to-site VPN in a clustered-units environment?

• A. VPN connections can be re-established only if the failed master unit recovers.
• B. Smart License is required to maintain VPN connections simultaneously across all cluster units.
• C. VPN connections must be re-established when a new master unit is elected.
• D. Only established VPN connections are maintained when a new master unit is elected.

Answer: C

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/fxos/clustering/ftd-cluster- solution.html#concept_g32_yml_y2b

NEW QUESTION 16

A security engineer must configure a Cisco FTD appliance to inspect traffic coming from the internet. The Internet traffic will be mirrored from the Cisco Catalyst 9300 Switch. Which configuration accomplishes the task?

• A. Set interface configuration mode to none.
• B. Set the firewall mode to transparent.
• C. Set the firewall mode to routed.
• D. Set interface configuration mode to passive.

Answer: D

NEW QUESTION 17

A network engineer is extending a user segment through an FTD device for traffic inspection without creating another IP subnet How is this accomplished on an FTD device in routed mode?

• A. by leveraging the ARP to direct traffic through the firewall
• B. by assigning an inline set interface
• C. by using a BVI and create a BVI IP address in the same subnet as the user segment
• D. by bypassing protocol inspection by leveraging pre-filter rules

Answer: C

Explanation:
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/trans

NEW QUESTION 18

An engineer runs the command restore remote-manager-backup location 2.2.2.2 admin /Volume/home/admin FTD408566513.zip on a Cisco FMC. After connecting to the repository, the Cisco FTD device is unable to accept the backup file. What is the reason for this failure?

• A. The backup file is not in .cfg format.
• B. The wrong IP address is used.
• C. The backup file extension was changed from .tar to .zip.
• D. The directory location is incorrect.

Answer: C

Explanation:
Reference: https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2019/pdf/BRKSEC-3455.pdf

NEW QUESTION 19
......