Cisco 300-710 Securing Networks with Cisco Firepower (SNCF) Online Training

Exam4Training Cisco 300-710 Securing Networks with Cisco Firepower (SNCF) Online Training is the best training materials on the Internet. It is the leader in all training materials. It not only can help you to pass the Securing Networks with Cisco Firepower (SNCF) exam, you can also improve your knowledge and skills. Help you in your career in your advantage successfully. As long as you have the Cisco 300-710 certification, you will be treated equally by all countries.

Page 1 of 3

1. Which two deployment types support high availability? (Choose two.)

transparent

routed

clustered

intra-chassis multi-instance

virtual appliance in public cloud

2. What are two application layer preprocessors? (Choose two.)

CIFS

IMAP

SSL

DNP3

ICMP

3. Which policy rule is included in the deployment of a local DMZ during the initial deployment of a Cisco NGFW through the Cisco FMC GUI?

a default DMZ policy for which only a user can change the IP addresses.

deny ip any

no policy rule is included

permit ip any

4. Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)

The units must be the same version

Both devices can be part of a different group that must be in the same domain when configured within the FM

The units must be different models if they are part of the same series.

The units must be configured only for firewall routed mode.

The units must be the same model.

5. What are the minimum requirements to deploy a managed device inline?

inline interfaces, security zones, MTU, and mode

passive interface, MTU, and mode

inline interfaces, MTU, and mode

passive interface, security zone, MTU, and mode

6. What is a result of enabling Cisco FTD clustering?

For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections.

Integrated Routing and Bridging is supported on the master unit.

Site-to-site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails.

All Firepower appliances can support Cisco FTD clustering.

7. Which Cisco Firepower Threat Defense, which two interface settings are required when configuring a routed interface? (Choose two.)

Redundant Interface

EtherChannel

Speed

Media Type

Duplex

8. Which protocol establishes network redundancy in a switched Firepower device deployment?

STP

HSRP

GLBP

VRRP

9. With Cisco Firepower Threat Defense software, which interface mode must be configured to passively receive traffic that passes through the appliance?

inline set

passive

routed

inline tap

10. On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?

transparent inline mode

TAP mode

strict TCP enforcement

propagate link state

Page 2 of 3

11. Which two dynamic routing protocols are supported in Firepower Threat Defense without using FlexConfig? (Choose two.)

EIGRP

OSPF

static routing

IS-IS

BGP

12. Which interface type allows packets to be dropped?

passive

inline

ERSPAN

TAP

13. What is the difference between inline and inline tap on Cisco Firepower?

Inline tap mode can send a copy of the traffic to another device.

Inline tap mode does full packet capture.

Inline mode cannot do SSL decryption.

Inline mode can drop malicious traffic.

14. Which Firepower feature allows users to configure bridges in routed mode and enables devices to perform Layer 2 switching between interfaces?

FlexConfig

BDI

SGT

IRB

15. Which object type supports object overrides?

time range

security group tag

network object

DNS server group

16. Which two actions can be used in an access control policy rule? (Choose two.)

Block with Reset

Monitor

Analyze

Discover

Block ALL

17. Which two statements about bridge-group interfaces in Cisco FTD are true? (Choose two.)

The BVI IP address must be in a separate subnet from the connected network.

Bridge groups are supported in both transparent and routed firewall modes.

Bridge groups are supported only in transparent firewall mode.

Bidirectional Forwarding Detection echo packets are allowed through the FTD when using bridge-group members.

Each directly connected network must be on the same subnet.

18. What is the disadvantage of setting up a site-to-site VPN in a clustered-units environment?

VPN connections can be re-established only if the failed master unit recovers.

Smart License is required to maintain VPN connections simultaneously across all cluster units.

VPN connections must be re-established when a new master unit is elected.

Only established VPN connections are maintained when a new master unit is elected.

19. Which two types of objects are reusable and supported by Cisco FMC? (Choose two.)

dynamic key mapping objects that help link HTTP and HTTPS GET requests to Layer 7 application protocols.

reputation-based objects that represent Security Intelligence feeds and lists, application filters based on category and reputation, and file lists

network-based objects that represent IP address and networks, port/protocols pairs, VLAN tags, security zones, and origin/destination country

network-based objects that represent FQDN mappings and networks, port/protocol pairs, VXLAN tags, security zones and origin/destination country

reputation-based objects, such as URL categories

20. Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD? (Choose two.)

OSPFv2 with IPv6 capabilities

virtual links

SHA authentication to OSPF packets

area boundary router type 1 LSA filtering

MD5 authentication to OSPF packets

Page 3 of 3

21. When creating a report template, how can the results be limited to show only the activity of a specific subnet?

Create a custom search in Firepower Management Center and select it in each section of the report.

Add an Input Parameter in the Advanced Settings of the report, and set the type to Network/I

Add a Table View section to the report with the Search field defined as the network in CIDR format.

Select IP Address as the X-Axis in each section of the report.

22. Which two routing options are valid with Cisco Firepower Threat Defense? (Choose two.)

BGPv6

ECMP with up to three equal cost paths across multiple interfaces

ECMP with up to three equal cost paths across a single interface

BGPv4 in transparent firewall mode

BGPv4 with nonstop forwarding

23. Which Cisco Firepower rule action displays an HTTP warning page?

Monitor

Block

Interactive Block

Allow with Warning

24. What is the result of specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?

The rate-limiting rule is disabled.

Matching traffic is not rate limited.

The system rate-limits all traffic.

The system repeatedly generates warnings.

25. In which two ways do access control policies operate on a Cisco Firepower system? (Choose two.)

Traffic inspection can be interrupted temporarily when configuration changes are deployed.

The system performs intrusion inspection followed by file inspection.

They can block traffic based on Security Intelligence data.

File policies use an associated variable set to perform intrusion prevention.

The system performs a preliminary inspection on trusted traffic to validate that it matches the trusted parameters.

26. In which two places can thresholding settings be configured? (Choose two.)

on each IPS rule

globally, within the network analysis policy

globally, per intrusion policy

on each access control rule

per preprocessor, within the network analysis policy

27. Which command is run on an FTD unit to associate the unit to an FMC manager that is at IP address 10.0.0.10, and that has the registration key Cisco123?

configure manager local 10.0.0.10 Cisco123

configure manager add Cisco123 10.0.0.10

configure manager local Cisco123 10.0.0.10

configure manager add 10.0.0.10 Cisco123

28. Which Cisco Firepower feature is used to reduce the number of events received in a period of time?

rate-limiting

suspending

correlation

thresholding

29. Which command must be run to generate troubleshooting files on an FTD?

system support view-files

sudo sf_troubleshoot.pl

system generate-troubleshoot all

show tech-support

30. What is the maximum bit size that Cisco FMC supports for HTTPS certificates?

1024

8192

4096

2048

Latest 300-710 Dumps Valid Version with 80 Q&As

Latest And Valid Q&A | 90 Days Free Update | Once Fail, Full Refund

Get Valid 300-710 Exam

Latest 300-710 Dumps Valid Version with 80 Q&As

Leave a Reply Cancel reply