Updated Feb-2022 Test Engine to Practice 300-710 Test Questions
300-710 Real Exam Questions Test Engine Dumps Training With 179 Questions
Topics of Securing Networks with Cisco Firepower (300-710 SNCF) Exam
These core topics isted below are general recommendations for the material that is likely to be used for the examination. However, on any particular delivery of the test, other similar topics could also appear. The guidelines below can update at any time without notice to better represent the contents of the exam and for clarity purposes.
It is recommended that, where possible, the applicant use these courses and/or other resources to provide background information on the exam objectives. The syllabus for the Securing Networks with Cisco Firepower (300-710 SNCF) examination is listed below in detail of each section and their topics:
1. Deployment (30%)
Objectives covered by this section:
Objective 1.1 â Implement NGFW modes:
- Transparent mode
- Routed mode
Objective 1.2 â Implement NGIPS modes:
- Passive
- Inline
Objective 1.3 â Implement high availability options:
- Link redundancy
- Multi-instance
- Active/standby failover
Objective 1.4 â Describe IRB configurations
2. Configuration (30%)
Objectives covered by this section:
Objective 2.1 â Configure system settings in Cisco Firepower Management Center
Objective 2.2 â Configure these policies in Cisco Firepower Management Center:
- Identity
- Prefilter
- SSL
Objective 2.3 â Configure these features using Cisco Firepower Management Center:
- Network discovery
- Application detectors (Open AppID)
- Correlation
- Actions
Objective 2.4 â Configure objects using Firepower Management Center:
- Object Management
- Intrusion Rules
Objective 2.5 â Configure devices using Firepower Management Center:
- NAT
- Device Management
- Certificates
- Platform Settings
- VPN
3. Management and Troubleshooting (25%)
Objectives covered by this section:
Objective 3.3 â Troubleshoot using packet capture procedures
Objective 3.4 â Analyze risk and standard reports
Objective 3.2 â Configure dashboards and reporting in FMC
Objective 3.1 â Troubleshoot with FMC CLI and GUI
4. Integration (15%)
Objectives covered by this section:
Objective 4.4 â Describe using Cisco Threat Response for security investigations
Objective 4.1 â Configure Cisco AMP for Networks in Firepower Management Center
Objective 4.2 â Configure Cisco AMP for Endpoints in Firepower Management Center
NEW QUESTION 87
How many report templates does the Cisco Firepower Management Center support?
- A. unlimited
- B. 0
- C. 1
- D. 2
Answer: A
Explanation:
Section: Management and Troubleshooting
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide- v60/Working_with_Reports.html
NEW QUESTION 88
How many report templates does the Cisco Firepower Management Center support?
- A. unlimited
- B. 0
- C. 1
- D. 2
Answer: A
NEW QUESTION 89
Drag and drop the steps to restore an automatic device registration failure on the standby Cisco FMC from the left into the correct order on the right. Not all options are used.
Explanation
Answer:
Explanation:
NEW QUESTION 90
Which command is run on an FTD unit to associate the unit to an FMC manager that is at IP address
10.0.0.10, and that has the registration key Cisco123?
- A. configure manager add Cisco123 10.0.0.10
- B. configure manager local Cisco123 10.0.0.10
- C. configure manager local 10.0.0.10 Cisco123
- D. configure manager add 10.0.0.10 Cisco123
Answer: D
Explanation:
Section: Configuration
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/misc/fmc-ftd-mgmt-nw/fmc-ftd-mgmt- nw.html#id_106101
NEW QUESTION 91
What is the maximum bit size that Cisco FMC supports for HTTPS certificates?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config- guide-v61/system_configuration.html
NEW QUESTION 92
An engineer configures a network discovery policy on Cisco FMC. Upon configuration, it is noticed that excessive and misleading events filing the database and overloading the Cisco FMC. A monitored NAT device is executing multiple updates of its operating system in a short period of time. What configuration change must be made to alleviate this issue?
- A. Leave default networks.
- B. Change the method to TCP/SYN.
- C. Exclude load balancers and NAT devices.
- D. Increase the number of entries on the NAT device.
Answer: C
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Network_Discovery_Policies.html
NEW QUESTION 93
What is the result of specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?
- A. The system repeatedly generates warnings.
- B. The rate-limiting rule is disabled.
- C. Matching traffic is not rate limited.
- D. The system rate-limits all traffic.
Answer: C
Explanation:
Section: Configuration
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/quality_of_service_qos.pdf
NEW QUESTION 94
Which CLI command is used to generate firewall debug messages on a Cisco Firepower?
- A. system support platform
- B. system support dump-table
- C. system support ssl-debug
- D. system support firewall-engine-debug
Answer: D
Explanation:
Section: Management and Troubleshooting
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212330-firepower- management-center-display-acc.html
NEW QUESTION 95
When do you need the file-size command option during troubleshooting with packet capture?
- A. when capture packets exceed 32 MB
- B. when capture packets are restricted from the secondary memory
- C. when capture packets exceed 10 GB
- D. when capture packets are less than 16 MB
Answer: A
NEW QUESTION 96
An administrator is adding a new URL-based category feed to the Cisco FMC for use within the policies. The intelligence source does not use STIX. but instead uses a .txt file format. Which action ensures that regular updates are provided?
- A. Add a URL source and select the flat file type within Cisco FMC.
- B. Add a TAXII feed source and input the URL for the feed.
- C. Convert the .txt file to STIX and upload it to the Cisco FMC.
- D. Upload the .txt file and configure automatic updates using the embedded URL.
Answer: B
NEW QUESTION 97
Which group within Cisco does the Threat Response team use for threat analysis and research?
- A. Cisco Deep Analytics
- B. OpenDNS Group
- C. Cisco Network Response
- D. Cisco Talos
Answer: D
Explanation:
Reference: https://www.cisco.com/c/en/us/products/security/threat-response.html#~benefits
NEW QUESTION 98
A connectivity issue is occurring between a client and a server which are communicating through a Cisco Firepower device While troubleshooting, a network administrator sees that traffic is reaching the server, but the client is not getting a response Which step must be taken to resolve this issue without initiating traffic from the client?
- A. Use packet capture to ensure that traffic is not being blocked by an access list.
- B. Use packet capture to validate that the packet passes through the firewall and is NATed to the corrected IP address.
- C. Use packet-tracer to ensure that traffic is not being blocked by an access list.
- D. Use packet-tracer to validate that the packet passes through the firewall and is NATed to the corrected IP address.
Answer: D
NEW QUESTION 99
Which limitation applies to Cisco FMC dashboards in a multi-domain environment?
- A. Child domains are able to view but not edit dashboards that originate from an ancestor domain.
- B. Child domains are not able to view dashboards that originate from an ancestor domain.
- C. Only the administrator of the top ancestor domain is able to view dashboards.
- D. Child domains have access to only a limited set of widgets from ancestor domains.
Answer: B
Explanation:
Section: Management and Troubleshooting
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide- v60/Using_Dashboards.html
NEW QUESTION 100
On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?
- A. strict TCP enforcement
- B. transparent inline mode
- C. propagate link state
- D. TAP mode
Answer: C
NEW QUESTION 101
Refer to the exhibit.
And engineer is analyzing the Attacks Risk Report and finds that there are over 300 instances of new operating systems being seen on the network How is the Firepower configuration updated to protect these new operating systems?
- A. The administrator requests a Remediation Recommendation Report from Cisco Firepower
- B. Cisco Firepower automatically updates the policies.
- C. Cisco Firepower gives recommendations to update the policies.
- D. The administrator manually updates the policies.
Ref: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Tailoring_Intrusion_Protection_to_Your_Network_Assets.html
Answer: C
NEW QUESTION 102
An organization has a compliancy requirement to protect servers from clients, however, the clients and servers all reside on the same Layer 3 network Without readdressing IP subnets for clients or servers, how is segmentation achieved?
- A. Change the IP addresses of the servers, while remaining on the same subnet
- B. Change the IP addresses of the clients, while remaining on the same subnet.
- C. Deploy a firewall in routed mode between the clients and servers
- D. Deploy a firewall in transparent mode between the clients and servers.
Answer: B
NEW QUESTION 103
What is the result a specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?
- A. The system repeatedly generates warnings.
- B. The rate-limiting rule is disabled.
- C. Matching traffic is not rate limited.
- D. The system rate-limits all traffic.
Answer: C
Explanation:
Section: Configuration
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/quality_of_service_qos.pdf
NEW QUESTION 104
Which two remediation options are available when Cisco FMC is integrated with Cisco ISE? (Choose two.)
- A. quarantine
- B. port shutdown
- C. dynamic null route configured
- D. host shutdown
- E. DHCP pool disablement
Answer: A,B
NEW QUESTION 105
Drag and drop the steps to restore an automatic device registration failure on the standby Cisco FMC from the left into the correct order on the right. Not all options are used.
Answer:
Explanation:
NEW QUESTION 106
Which Cisco Firepower rule action displays an HTTP warning page?
- A. Interactive Block
- B. Block
- C. Allow with Warning
- D. Monitor
Answer: A
NEW QUESTION 107
A network engineer is extending a user segment through an FTD device for traffic inspection without creating another IP subnet How is this accomplished on an FTD device in routed mode?
- A. by assigning an inline set interface
- B. by leveraging the ARP to direct traffic through the firewall
- C. by bypassing protocol inspection by leveraging pre-filter rules
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/transparent_or_routed_firewall_mode_for_firepower_threat_defense.html - D. by using a BVI and create a BVI IP address in the same subnet as the user segment
Answer: D
NEW QUESTION 108
......
300-710 Actual Questions Answers PDF 100% Cover Real Exam Questions: https://ucertify.examprepaway.com/Cisco/braindumps.300-710.ete.file.html