Top Tips Of Rebirth 300-710 Dumps Questions

NEW QUESTION 1

A network administrator is concerned about (he high number of malware files affecting users' machines. What must be done within the access control policy in Cisco FMC to address this concern?

• A. Create an intrusion policy and set the access control policy to block.
• B. Create an intrusion policy and set the access control policy to allow.
• C. Create a file policy and set the access control policy to allow.
• D. Create a file policy and set the access control policy to block.

Answer: D

NEW QUESTION 2

Which two conditions must be met to enable high availability between two Cisco FTD devices? (Choose two.)

• A. same flash memory size
• B. same NTP configuration
• C. same DHCP/PPoE configuration
• D. same host name
• E. same number of interfaces

Answer: BE

Explanation:
https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/212699-configure-ftd-high- Conditions
In order to create an HA between 2 FTD devices, these conditions must be met: Same model
Same version (this applies to FXOS and to FTD - (major (first number), minor (second number), and maintenance (third number) must be equal))
Same number of interfaces
Same type of interfaces
Both devices as part of same group/domain in FMC
Have identical Network Time Protocol (NTP) configuration Be fully deployed on the FMC without uncommitted changes Be in the same firewall mode: routed or transparent.
Note that this must be checked on both FTD devices and FMC GUI since there have been cases where the FTDs had the same mode, but FMC does not reflect this.
Does not have DHCP/Point-to-Point Protocol over Ethernet (PPPoE) configured in any of the interface Different hostname (Fully Qualified Domain Name (FQDN)) for both chassis. In order to check the chassis
hostname navigate to FTD CLI and run this command

NEW QUESTION 3

Which command must be run to generate troubleshooting files on an FTD?

• A. system support view-files
• B. sudo sf_troubleshoot.pl
• C. system generate-troubleshoot all
• D. show tech-support

Answer: C

Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/security/sourcefire-defense-center/117663-technote- SourceFire-00.html

NEW QUESTION 4

An engineer is troubleshooting a device that cannot connect to a web server. The connection is initiated from the Cisco FTD inside interface and attempting to reach 10.0.1.100 over the non-standard port of 9443 The host the engineer is attempting the connection from is at the IP address of 10.20.10.20. In order to determine what is happening to the packets on the network, the engineer decides to use the FTD packet capture tool Which capture configuration should be used to gather the information needed to troubleshoot this issue?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: B

NEW QUESTION 5

With a recent summer time change, system logs are showing activity that occurred to be an hour behind real time Which action should be taken to resolve this issue?

• A. Manually adjust the time to the correct hour on all managed devices
• B. Configure the system clock settings to use NTP with Daylight Savings checked
• C. Manually adjust the time to the correct hour on the Cisco FMC.
• D. Configure the system clock settings to use NTP

Answer: B

NEW QUESTION 6

An organization recently implemented a transparent Cisco FTD in their network. They must ensure that the device does not respond to insecure SSL/TLS protocols. Which action accomplishes the task?

• A. Modify the device's settings using the device management feature within Cisco FMC to force onlysecure protocols.
• B. Use the Cisco FTD platform policy to change the minimum SSL version on the device to TLS 1.2.
• C. Enable the UCAPL/CC compliance on the device to support only the most secure protocols available.
• D. Configure a FlexConfig object to disable any insecure TLS protocols on the Cisco FTD device.

Answer: B

NEW QUESTION 7

A network security engineer must replace a faulty Cisco FTD device in a high availability pair. Which action must be taken while replacing the faulty unit?

• A. Shut down the Cisco FMC before powering up the replacement unit.
• B. Ensure that the faulty Cisco FTD device remains registered to the Cisco FMC.
• C. Unregister the faulty Cisco FTD device from the Cisco FMC
• D. Shut down the active Cisco FTD device before powering up the replacement unit.

Answer: C

NEW QUESTION 8

Which two types of objects are reusable and supported by Cisco FMC? (Choose two.)

• A. dynamic key mapping objects that help link HTTP and HTTPS GET requests to Layer 7 application protocols.
• B. reputation-based objects that represent Security Intelligence feeds and lists, application filters based on category and reputation, and file lists
• C. network-based objects that represent IP address and networks, port/protocols pairs, VLAN tags, security zones, and origin/destination country
• D. network-based objects that represent FQDN mappings and networks, port/protocol pairs, VXLAN tags, security zones and origin/destination country
• E. reputation-based objects, such as URL categories

Answer: BC

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/reusable_objects.html#ID-2243-00000414

NEW QUESTION 9

An engineer currently has a Cisco FTD device registered to the Cisco FMC and is assigned the address of 10.10.50.12. The organization is upgrading the addressing schemes and there is a requirement to convert the addresses to a format that provides an adequate amount of addresses on the network What should the engineer do to ensure that the new addressing takes effect and can be used for the Cisco FTD to Cisco FMC connection?

• A. Delete and reregister the device to Cisco FMC
• B. Update the IP addresses from IFV4 to IPv6 without deleting the device from Cisco FMC
• C. Format and reregister the device to Cisco FMC.
• D. Cisco FMC does not support devices that use IPv4 IP addresses.

Answer: A

NEW QUESTION 10

Which command is typed at the CLI on the primary Cisco FTD unit to temporarily stop running high- availability?

• A. configure high-availability resume
• B. configure high-availability disable
• C. system support network-options
• D. configure high-availability suspend

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config- guide-v61/firepower_threat_defense_high_availability.html

NEW QUESTION 11

A Cisco FTD device is running in transparent firewall mode with a VTEP bridge group member ingress interface. What must be considered by an engineer tasked with specifying a destination MAC address for a packet trace?

• A. Only the UDP packet type is supported.
• B. The output format option for the packet logs is unavailable.
• C. The destination MAC address is optional if a VLAN ID value is entered.
• D. The VLAN ID and destination MAC address are optional.

Answer: C

NEW QUESTION 12

The administrator notices that there is malware present with an .exe extension and needs to verify if any of the systems on the network are running the executable file. What must be configured within Cisco AMP for Endpoints to show this data?

• A. prevalence
• B. threat root cause
• C. vulnerable software
• D. file analysis

Answer: A

NEW QUESTION 13

An engineer attempts to pull the configuration for a Cisco FTD sensor to review with Cisco TAC but does not have direct access to the CU for the device. The CLl for the device is managed by Cisco FMC to which the engineer has access. Which action in Cisco FMC grants access to the CLl for the device?

• A. Export the configuration using the Import/Export tool within Cisco FMC.
• B. Create a backup of the configuration within the Cisco FMC.
• C. Use the show run all command in the Cisco FTD CLI feature within Cisco FMC.
• D. Download the configuration file within the File Download section of Cisco FMC.

Answer: A

NEW QUESTION 14

In which two places can thresholding settings be configured? (Choose two.)

• A. on each IPS rule
• B. globally, within the network analysis policy
• C. globally, per intrusion policy
• D. on each access control rule
• E. per preprocessor, within the network analysis policy

Answer: AC

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa- firepower-module-user-guide-v541/Intrusion-Global-Threshold.pdf

NEW QUESTION 15

An administrator needs to configure Cisco FMC to send a notification email when a data transfer larger than 10 MB is initiated from an internal host outside of standard business hours. Which Cisco FMC feature must be configured to accomplish this task?

• A. file and malware policy
• B. application detector
• C. intrusion policy
• D. correlation policy

Answer: A

NEW QUESTION 16

An engineer has been tasked with providing disaster recovery for an organization's primary Cisco FMC. What must be done on the primary and secondary Cisco FMCs to ensure that a copy of the original corporate policy is available if the primary Cisco FMC fails?

• A. Configure high-availability in both the primary and secondary Cisco FMCs
• B. Connect the primary and secondary Cisco FMC devices with Category 6 cables of not more than 10 meters in length.
• C. Place the active Cisco FMC device on the same trusted management network as the standby device
• D. Restore the primary Cisco FMC backup configuration to the secondary Cisco FMC device when the primary device fails

Answer: D

NEW QUESTION 17

Which two dynamic routing protocols are supported in Firepower Threat Defense without using FlexConfig? (Choose two.)

• A. EIGRP
• B. OSPF
• C. static routing
• D. IS-IS
• E. BGP

Answer: BE

Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/660/fdm/fptd-fdm-config-guide-660/fptd- fdm-routing.html

NEW QUESTION 18

Which two packet captures does the FTD LINA engine support? (Choose two.)

• A. Layer 7 network ID
• B. source IP
• C. application ID
• D. dynamic firewall importing
• E. protocol

Answer: BE

Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212474-working-with- firepower-threat-defense-f.html

NEW QUESTION 19
......