Free 300-710 Exam Dumps Preview

An analyst is reviewing the Cisco FMC reports for the week. They notice that some peer-to-peer applications are being used on the network and they must identify which poses the greatest risk to the environment.

Which report gives the analyst this information?

A network administrator has converted a Cisco FTD from using LDAP to LDAPS for VPN authentication. The Cisco FMC can connect to the LDAPS server, but the Cisco FTD is not connecting.

Which configuration must be enabled on the Cisco FTD?

An organization recently implemented a transparent Cisco FTD in their network. They must ensure that the device does not respond to insecure SSL/TLS protocols.

Which action accomplishes this task?

Refer to the exhibit.

An engineer is analyzing the Attacks Risk Report and finds that there are over 300 instances of new operating systems being seen on the network.

How is the Firepower configuration updated to protect these new operating systems?

An engineer attempts to pull the configuration for a Cisco FTD sensor to review with Cisco TAC but does not have direct access to the CLI for the device. The CLI for the device is managed by Cisco FMC to which the engineer has access.

Which action in Cisco FMC grants access to the CLI for the device?

A network administrator is configuring a BVI interface on a routed FTD. The administrator wants to isolate traffic on the interfaces connected to the bridge group and not have the FTD route this traffic using the routing table.

What must be configured?

A network administrator registered a new FTD to an existing FMC. The administrator cannot place the FTD in transparent mode.

Which action enables transparent mode?

An engainer must add DNS-specific rules to me Cisco FTD intrusion policy. The engineer wants to use the rules currently in the Cisco FTD Snort database that are not already enabled but does not want to enable more than are needed.

Which action meets these requirements?

What is a valid Cisco AMP file disposition?

A network security engineer must export packet captures from the Cisco FMC web browser while troubleshooting an issue.

When navigating to the address https://<FMC IP>/capture/CAPI/pcap/test.pcap.anerror403:ForbiddenisgiveninsteadofthePCAPfile.Whichactionmusttheengineertaketoresolvethisissue?

What is the role of realms in the Cisco ISE and Cisco Secure Firewall Management Center integration?

An engineer must export a packet capture from Cisco Secure Firewall Management Center to assist in troubleshooting an issue on a Secure Firewall Threat Defense device. When the engineer navigates to the URL for Secure Firewall Management Center at:

https:///capture/CAPI/pcap/sample.pcap The engineer receives a 403: Forbidden error instead of being
provided with the PCAP file.

Which action resolves the issue?

An organization must be able to ingest NetFlow traffic from their Cisco FTD device to Cisco Stealthwatch for behavioral analysis.

What must be configured on the Cisco FTD to meet this requirement?

What is the maximum SHA level of filtering that Threat Intelligence Director supports?

An engineer must configure high availability for the Cisco Firepower devices. The current network topology does not allow for two devices to pass traffic concurrently.

How must the devices be implemented in this environment?

Cisco Security Analytics and Logging SaaS licenses come with how many days of data retention by default?

The event dashboard within the Cisco FMC has been inundated with low priority intrusion drop events, which are overshadowing high priority events. An engineer has been tasked with reviewing the policies and reducing the low priority events.

Which action should be configured to accomplish this task?

Refer to the exhibit.

An engineer is deploying a new instance of Cisco Secure Firewall Threat Defense.

Which action must the engineer take next so that Client_A and Client_B receive an IP address via DHCP from Server_A?

A company is in the process of deploying intrusion protection with Cisco FTDs managed by a Cisco FMC.

Which action must be selected to enable fewer rules detect only critical conditions and avoid false positives?

Refer to the exhibit.

An engineer is configuring a high-availability solution that has the hardware devices and software versions:

1. two Cisco Secure Firewall 9300 Security Appliances with FXOS SW 2.0(1.23)
2. one Cisco Secure Firewall Threat Defense with 6.0 1 1 (build 1023)
3. one Cisco Secure Firewall Management Center with SW 6 0.1.1 (build 1023)

Which condition must be met to complete the high-availability configuration?

A security engineer is deploying a pair of primary and secondary Cisco FMC devices. The secondary must also receive updates from Cisco Talos.

Which action achieves this goal?

An organization is using a Cisco FTD and Cisco ISE to perform identity-based access controls. A network administrator is analyzing the Cisco FTD events and notices that unknown user traffic is being allowed through the firewall.

How should this be addressed to block the traffic while allowing legitimate user traffic?

Which two statements are valid regarding the licensing model used on Cisco Secure Firewall Threat Defense Virtual appliances? (Choose two.)

An engineer is configuring two new Cisco FTD devices to replace the existing high availability firewall pair in a highly secure environment. The information exchanged between the FTD devices over the failover link must be encrypted.

Which protocol supports this on the Cisco FTD?

An engineer installs a Cisco FTD device and wants to inspect traffic within the same subnet passing through a firewall and inspect traffic destined to the Internet.

Which configuration will meet this requirement?

Which command is run on an FTD unit to associate the unit to an FMC manager that is at IP address 10.0.0.10, and that has the registration key Cisco123?

An engineer is tasked with deploying an internal perimeter firewall that will support multiple DMZs Each DMZ has a unique private IP subnet range.

How is this requirement satisfied?

An engineer is troubleshooting a device that cannot connect to a web server. The connection is initiated from the Cisco FTD inside interface and attempting to reach 10.0.1.100 over the non-standard port of 9443. The host the engineer is attempting the connection from is at the IP address of 10.20.10.20. In order to determine what is happening to the packets on the network, the engineer decides to use the FTD packet capture tool.

Which capture configuration should be used to gather the information needed to troubleshoot the issue?

An engineer must define a URL object on Cisco FMC.

What is the correct method to specify the URL without performing SSL inspection?

When using Cisco AMP for Networks, which feature copies a file to the Cisco AMP cloud for analysis?

In a Cisco AMP for Networks deployment, which disposition is returned if the cloud cannot be reached?

Refer to the exhibit.

An engineer generates troubleshooting files in Cisco Secure Firewall Management Center (FMC).

A successfully completed task Is removed before the files are downloaded.

Which two actions must be taken to determine the filename and obtain the generated troubleshooting files without regenerating them? (Choose two.)

Within Cisco Firepower Management Center, where does a user add or modify widgets?

An engineer is configuring a second Cisco FMC as a standby device but is unable to register with the active unit.

What is causing this issue?

An administrator is setting up a Cisco FMC and must provide expert mode access for a security engineer.
The engineer is permitted to use only a secured out-of-band network workstation with a static IP address to access the Cisco FMC.

What must be configured to enable this access?

Refer to the exhibit.

An administrator is looking at some of the reporting capabilities for Cisco Firepower and noticed this section of the Network Risk Report showing a lot of SSL activity that could be used for evasion.

Which action will mitigate this risk?

A network engineer must configure IPS mode on a Secure Firewall Threat Defense device to inspect traffic and act as an IDS. The engineer already configured the passive-interface on the Secure Firewall Threat Defense device and SPAN on the switch.

What must be configured next by the engineer?

An administrator must use Cisco FMC to install a backup route within the Cisco FTD to route traffic in case of a routing failure with primary route.

Which action accomplish this task?

An engineer is deploying a Cisco ASA Secure Firewall module. The engineer must be able to examine traffic without impacting the network, and the ASA has been deployed with a single context.

Which ASA Secure Firewall module deployment mode must be implemented to meet the requirements?

Which two types of objects are reusable and supported by Cisco FMC? (Choose two.)

An engineer wants to change an existing transparent Cisco FTD to routed mode. The device controls traffic
between two network segments.

Which action is mandatory to allow hosts to reestablish communication between these two segments after the change?

A network administrator notices that remote access VPN users are not reachable from inside the network.

It is determined that routing is configured correctly, however return traffic is entering the firewall but not leaving it

What is the reason for this issue?

What is a method used by Cisco Rapid Threat Containment to contain the threat in the network?

What is the result of specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?

A security analyst must create a new report within Cisco FMC to show an overview of the daily attacks, vulnerabilities, and connections. The analyst wants to reuse specific dashboards from other reports to create this consolidated one.

Which action accomplishes this task?

Cisco SecureX is classified as which type of threat detection and response solution?

A security engineer must create a malware and file policy on a Cisco Secure Firewall Threat Defense device.
The solution must ensure that PDF, DOCX, and XLSX files are not sent to Cisco Secure Malware Analytics.

What must be configured to meet the requirements?

Refer to the exhibit.

An organization has an access control rule with the intention of sending all social media traffic for inspection.
After using the rule for some time, the administrator notices that the traffic is not being inspected, but is being automatically allowed.

What must be done to address this issue?

An engineer is reviewing an existing custom server fingerprint on a Cisco Secure Firewall because the current information is inaccurate.

Which action must the engineer take to improve the accuracy of the network discovery rules?

A security engineer must integrate an external feed containing STIX/TAXII data with Cisco FMC.

Which feature must be enabled on the Cisco FMC to support this connection?

A network administrator is configuring an FTD in transparent mode. A bridge group is set up and an access policy has been set up to allow all IP traffic. Traffic is not passing through the FTD.

What additional configuration is needed?

A security engineer must add a new policy to block UDP traffic to one server. The engineer adds a new object.

Which action must the engineer take next to identify all the UDP ports?

An engineer is implementing Cisco FTD in the network and is determining which Firepower mode to use.
The organization needs to have multiple virtual Firepower devices working separately inside of the FTD appliance to provide traffic segmentation.

Which deployment mode should be configured in the Cisco Firepower Management Console to support these requirements?

Network users are experiencing intermittent issues with internet access. An engineer identified that the issue is being caused by NAT exhaustion.

How must the engineer change the dynamic NAT configuration to provide internet access for more users without running out of resources?

Which interface type allows packets to be dropped?

Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?

Refer to the exhibit.

What must be done to fix access to this website while preventing the same communication to all other websites?

An engineer is configuring Cisco FMC and wants to limit the time allowed for processing packets through the interface. However, if the time is exceeded, the configuration must allow packets to bypass detection.

What must be configured on the Cisco FMC to accomplish this task?

An organization is configuring a new Cisco Secure Firewall ASA High Availability deployment.

Which action must be taken to ensure that failover is as seamless as possible to end users?

What is a result of enabling Cisco FTD clustering?

What must be implemented on Cisco Firepower to allow multiple logical devices on a single physical device to have access to external hosts?

Which group within Cisco does the Threat Response team use for threat analysis and research?

An engineer is monitoring network traffic from their sales and product development departments, which are on two separate networks.

What must be configured in order to maintain data privacy for both departments?

A network administrator is seeing an unknown verdict for a file detected by Cisco FTD.

Which malware policy configuration option must be selected in order to further analyze the file in the Talos cloud?

DRAG DROP

the steps to restore an automatic device registration failure on the standby Cisco FMC from the left into the correct order on the right. Not all options are used.

After using Firepower for some time and learning about how it interacts with the network, an administrator is trying to correlate malicious activity with a user.

Which widget should be configured to provide this visibility on the Cisco Firepower Dashboards?

A network administrator wants to configure a Cisco Secure Firewall Threat Defense instance managed by Cisco Secure Firewall Management Center to block traffic to known cryptomining networks.

Which system settings must the administrator configure in Secure Firewall Management Center to meet the requirement?

What is a behavior of a Cisco FMC database purge?