Free 300-710 Braindumps Download Updated on Sep 04, 2023 with 261 Questions
Cisco 300-710 Exam Practice Test Questions
Cisco Firepower is a suite of advanced security products that provide comprehensive network protection against a wide range of threats, including malware, viruses, and other forms of cyber-attacks. The Cisco 300-710 exam focuses on the specific features and functionality of Cisco Firepower, including its advanced threat detection and prevention capabilities.
NEW QUESTION # 140
Refer to the exhibit.
What must be done to fix access to this website while preventing the same communication to all other websites?
- A. Create an intrusion policy rule to have Snort allow port 443 to only 172.1.1.50
- B. Create an access control policy rule to allow port 443 to only 172.1.1 50
- C. Create an access control policy rule to allow port 80 to only 172.1.1 50.
- D. Create an intrusion policy rule to have Snort allow port 80 to only 172.1.1 50.
Answer: C
NEW QUESTION # 141
An organization is using a Cisco FTD and Cisco ISE to perform identity-based access controls. A network administrator is analyzing the Cisco FTD events and notices that unknown user traffic is being allowed through the firewall. How should this be addressed to block the traffic while allowing legitimate user traffic?
- A. Modify the Cisco ISE authorization policy to deny this access to the user.
- B. Add the unknown user in the Access Control Policy in Cisco FTD.
- C. Add the unknown user in the Malware & File Policy in Cisco FTD.
- D. Modify Cisco ISE to send only legitimate usernames to the Cisco FTD.
Answer: B
NEW QUESTION # 142
A security analyst must create a new report within Cisco FMC to show an overview of the daily attacks, vulnerabilities, and connections. The analyst wants to reuse specific dashboards from other reports to create this consolidated one. Which action accomplishes this task?
- A. Modify the Custom Workflows within the Cisco FMC to feed the desired data into the new report.
- B. Create a new dashboard object via Object Management to represent the desired views.
- C. Use the import feature in the newly created report to select which dashboards to add.
- D. Copy the Malware Report and modify the sections to pull components from other reports.
Answer: C
NEW QUESTION # 143
Refer to the exhibit.
An administrator is looking at some of the reporting capabilities for Cisco Firepower and noticed this section of the Network Risk report showing a lot of SSL activity that cloud be used for evasion. Which action will mitigate this risk?
- A. Use SSL decryption to analyze the packets.
- B. Use Cisco AMP for Endpoints to block all SSL connection
- C. Use Cisco Tetration to track SSL connections to servers.
- D. Use encrypted traffic analytics to detect attacks
Answer: A
NEW QUESTION # 144
A network administrator discovers that a user connected to a file server and downloaded a malware file. The Cisc FMC generated an alert for the malware event, however the user still remained connected. Which Cisco APM file rule action within the Cisco FMC must be set to resolve this issue?
- A. Local Malware Analysis
- B. Reset Connection
- C. Malware Cloud Lookup
- D. Detect Files
Answer: B
NEW QUESTION # 145
The network administrator wants to enhance the network security posture by enabling machine learning tor malware detection due to a concern with suspicious Microsoft executable file types that were seen while creating monthly security reports for the CIO. Which feature must be enabled to accomplish this goal?
- A. dynamic analysis
- B. Spero
- C. static analysis
- D. Ethos
Answer: B
NEW QUESTION # 146
What is the result of specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?
- A. The rate-limiting rule is disabled.
- B. The system repeatedly generates warnings.
- C. The system rate-limits all traffic.
- D. Matching traffic is not rate limited.
Answer: D
NEW QUESTION # 147
Which Firepower feature allows users to configure bridges in routed mode and enables devices to perform Layer 2 switching between interfaces?
- A. SGT
- B. BDI
- C. FlexConfig
- D. IRB
Answer: D
NEW QUESTION # 148
Drag and drop the steps to restore an automatic device registration failure on the standby Cisco FMC from the left into the correct order on the right. Not all options are used.
Answer:
Explanation:
Explanation
Explanation
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/firepower_management_center_high_availability.html#id_32288
NEW QUESTION # 149
An analyst is reviewing the Cisco FMC reports for the week. They notice that some peer-to-peer applications are being used on the network and they must identify which poses the greatest risk to the environment. Which report gives the analyst this information?
- A. User Risk Report
- B. Network Risk Report
- C. Advanced Malware Risk Report
- D. Attacks Risk Report
Answer: B
NEW QUESTION # 150
What is the RTC workflow when the infected endpoint is identified?
- A. Cisco AMP instructs Cisco FMC to contain the infected endpoint.
- B. Cisco FMC instructs Cisco ISE to contain the infected endpoint.
- C. Cisco ISE instructs Cisco AMP to contain the infected endpoint.
- D. Cisco ISE instructs Cisco FMC to contain the infected endpoint.
Answer: B
NEW QUESTION # 151
A network administrator discovers that a user connected to a file server and downloaded a malware file. The Cisc FMC generated an alert for the malware event, however the user still remained connected. Which Cisco APM file rule action within the Cisco FMC must be set to resolve this issue?
- A. Local Malware Analysis
- B. Malware Cloud Lookup
- C. Detect Files
- D. Reset Connection
Answer: B
NEW QUESTION # 152
A network engineer is extending a user segment through an FTD device for traffic inspection without creating another IP subnet How is this accomplished on an FTD device in routed mode?
- A. by bypassing protocol inspection by leveraging pre-filter rules
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/transparent_or_routed_firewall_mode_for_firepower_threat_defense.html - B. by using a BVI and create a BVI IP address in the same subnet as the user segment
- C. by assigning an inline set interface
- D. by leveraging the ARP to direct traffic through the firewall
Answer: B
NEW QUESTION # 153
An engineer is configuring a second Cisco FMC as a standby device but is unable to register with the active unit. What is causing this issue?
- A. The primary FMC currently has devices connected to it.
- B. The licensing purchased does not include high availability.
- C. The code versions running on the Cisco FMC devices are different.
- D. There is only 10 Mbps of bandwidth between the two devices.
Answer: C
Explanation:
Section: Deployment
NEW QUESTION # 154
Which license type is required on Cisco ISE to integrate with Cisco FMC pxGrid?
- A. base
- B. plus
- C. mobility
- D. apex
Answer: B
NEW QUESTION # 155
What is a functionality of port objects in Cisco FMC?
- A. to mix transport protocols when setting both source and destination port conditions in a rule
- B. to represent protocols other than TCP, UDP, and ICMP
- C. to represent all protocols in the same way
- D. to add any protocol other than TCP or UDP for source port conditions in access control rules.
Answer: B
NEW QUESTION # 156
Refer to the exhibit.
An administrator is looking at some of the reporting capabilities for Cisco Firepower and noticed this section of the Network Risk report showing a lot of SSL activity that cloud be used for evasion. Which action will mitigate this risk?
- A. Use SSL decryption to analyze the packets.
- B. Use Cisco AMP for Endpoints to block all SSL connection
- C. Use Cisco Tetration to track SSL connections to servers.
- D. Use encrypted traffic analytics to detect attacks
Answer: A
NEW QUESTION # 157
A Cisco FTD device is running in transparent firewall mode with a VTEP bridge group member ingress interface. What must be considered by an engineer tasked with specifying a destination MAC address for a packet trace?
- A. The output format option for the packet logs is unavailable.
- B. Only the UDP packet type is supported.
- C. The VLAN ID and destination MAC address are optional.
- D. The destination MAC address is optional if a VLAN ID value is entered.
Answer: D
NEW QUESTION # 158
Which action should you take when Cisco Threat Response notifies you that AMP has identified a file as malware?
- A. Forward the result of the investigation to an external threat-analysis engine.
- B. Add the malicious file to the block list.
- C. Wait for Cisco Threat Response to automatically block the malware.
- D. Send a snapshot to Cisco for technical support.
Answer: B
Explanation:
Section: Integration
NEW QUESTION # 159
In which two ways do access control policies operate on a Cisco Firepower system? (Choose two.)
- A. They can block traffic based on Security Intelligence data.
- B. The system performs intrusion inspection followed by file inspection.
- C. The system performs a preliminary inspection on trusted traffic to validate that it matches the trusted parameters.
- D. File policies use an associated variable set to perform intrusion prevention.
- E. Traffic inspection can be interrupted temporarily when configuration changes are deployed.
Answer: A,E
NEW QUESTION # 160
Which limitation applies to Cisco Firepower Management Center dashboards in a multidomain environment?
- A. Only the administrator of the top ancestor domain can view dashboards.
- B. Child domains have access to only a limited set of widgets from ancestor domains.
- C. Child domains can view but not edit dashboards that originate from an ancestor domain.
- D. Child domains cannot view dashboards that originate from an ancestor domain.
Answer: D
NEW QUESTION # 161
A VPN user is unable to conned lo web resources behind the Cisco FTD device terminating the connection. While troubleshooting, the network administrator determines that the DNS responses are not getting through the Cisco FTD What must be done to address this issue while still utilizing Snort IPS rules?
- A. Decrypt the packet after the VPN flow so the DNS queries are not inspected
- B. Modify the Snort rules to allow legitimate DNS traffic to the VPN users.
- C. Uncheck the "Drop when Inline" box in the intrusion policy to allow the traffic.
- D. Disable the intrusion rule threshes to optimize the Snort processing.
Answer: B
NEW QUESTION # 162
An analyst using the security analyst account permissions is trying to view the Correlations Events Widget but is not able to access it. However, other dashboards are accessible. Why is this occurring?
- A. The security analyst role does not have permission to view this widget.
- B. The widget is configured to display only when active events are present.
- C. The widget is not configured within the Cisco FMC.
- D. An API restriction within the Cisco FMC is preventing the widget from displaying.
Answer: A
NEW QUESTION # 163
Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)
- A. The units must be configured only for firewall routed mode.
- B. Both devices can be part of a different group that must be in the same domain when configured within the FMC.
- C. The units must be the same model.
- D. The units must be different models if they are part of the same series.
- E. The units must be the same version
Answer: C,E
Explanation:
Section: Deployment
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/212699- configure-ftd-high-availability-on-firep.html
NEW QUESTION # 164
......
Updated Verified 300-710 dumps Q&As - Pass Guarantee or Full Refund: https://www.troytecdumps.com/300-710-troytec-exam-dumps.html
Updated Certification Exam 300-710 Dumps - Practice Test Questions: https://drive.google.com/open?id=1JL4i4VDPEEby_OmwnHKQEeXEboeTFpCE