Skip to main content

300-710 Real Exam Questions

Securing Networks with Cisco Firepower (SNCF)

447 questions available · Page 1 of 45

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

Which Cisco FMC report gives the analyst information about the ports and protocols that are related to the configured sensitive network for analysis?

  1. A

    Malware Report

  2. B

    Host Report

  3. C

    Firepower Report

  4. D

    Network Report

Show answer and explanation

Correct answer: D

Question 2 Single choice

An engineer plans to reconfigure an existing Cisco FTD from transparent mode to routed mode.

Which additional action must be taken to maintain communication Between me two network segments?

  1. A

    Configure a NAT rule so mat traffic between the segments is exempt from NAT.

  2. B

    Update the IP addressing so that each segment is a unique IP subnet.

  3. C

    Deploy inbound ACLs on each interface to allow traffic between the segments.

  4. D

    Assign a unique VLAN ID for the interface in each segment.

Show answer and explanation

Correct answer: B

Explanation

When reconfiguring an existing Cisco FTD from transparent mode to routed mode, an additional action that must be taken to maintain communication between the two network segments is to update the IP addressing so that each segment is a unique IP subnet. This is because in routed mode, the FTD device acts as a router hop in the network and requires each interface to be on a different subnet. In transparent mode, the FTD device acts as a layer 2 firewall and does not require different subnets for each interface 1.
The other options are incorrect because: Configuring a NAT rule so that traffic between the segments is exempt from NAT is not necessary to maintain communication between the two network segments. NAT is used to translate IP addresses between different networks, but it does not affect the routing of packets.
Moreover, NAT is optional in routed mode and can be disabled if not needed 2.
Deploying inbound ACLs on each interface to allow traffic between the segments is not required to maintain communication between the two network segments. ACLs are used to control access to network resources based on source and destination addresses, protocols, and ports. They do not affect the routing of packets.
Furthermore, ACLs are optional in routed mode and can be configured as needed 3. Assigning a unique VLAN ID for the interface in each segment is not relevant to maintain communication between the two network segments. VLANs are used to create logical groups of hosts that share the same broadcast domain, regardless of their physical location or connection. They do not affect the routing of packets. Besides, VLANs are not supported in routed mode and can only be used in transparent mode 4.

Question 3 Single choice

A network administrator registered a new FTD to an existing FMC. The administrator cannot place the FTD in transparent mode.

Which action enables transparent mode?

  1. A

    Deregister the FTD device from FMC and configure transparent mode via the CLI.

  2. B

    Obtain an FTD model that supports transparent mode.

  3. C

    Add a Bridge Group Interface to the FTD before transparent mode is configured.

  4. D

    Assign an IP address to two physical interfaces.

Show answer and explanation

Correct answer: A

Question 4 Multiple choice

A network engineer must provide redundancy between two Cisco FTD devices. The redundancy configuration must include automatic configuration, translation, and connection updates.
After the initial configuration of the two appliances, which two steps must be taken to proceed with the redundancy configuration? (Choose two.)

  1. A

    Configure the virtual MAC address on the failover link.

  2. B

    Configure the failover link with stateful properties.

  3. C

    Disable hellos on the inside interface.

  4. D

    Ensure the high availability license is enabled.

  5. E

    Configure the standby IP addresses.

Show answer and explanation

Correct answers: A, E

Question 5 Single choice

Which CLI command is used to generate firewall debug messages on a Cisco Firepower?

  1. A

    system support firewall-engine-debug

  2. B

    system support ssl-debug

  3. C

    system support platform

  4. D

    system support dump-table

Show answer and explanation

Correct answer: A

Explanation

References:
https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212330-firepower-management-center-display-acc.html

Question 6 Single choice

An administrator must use Cisco FMC to install a backup route within the Cisco FTD to route traffic in case of a routing failure with primary route.

Which action accomplish this task?

  1. A

    Install the static backup route and modify the metric to be less than the primary route

  2. B

    Use a default route in the FMC instead of having multiple routes contending for priority

  3. C

    Configure EIGRP routing on the FMC to ensure that dynamic routes are always updated

  4. D

    Create the backup route and use route tracking on both routes to a destination IP address in the network

Show answer and explanation

Correct answer: D

Question 7 Single choice

A network administrator reviews the attack risk report and notices several low-impact attacks.

What does this type of attack indicate?

  1. A

    All attacks are listed as low until manually recategorized.

  2. B

    The host is not vulnerable to those attacks.

  3. C

    The host is not within the administrator's environment.

  4. D

    The attacks are not dangerous to the network.

Show answer and explanation

Correct answer: D

Question 8 Single choice

What is a feature of Cisco AMP private cloud?

  1. A

    It disables direct connections to the public cloud.

  2. B

    It supports security intelligence filtering.

  3. C

    It support anonymized retrieval of threat intelligence.

  4. D

    It performs dynamic analysis.

Show answer and explanation

Correct answer: A

Explanation

References:
https://www.cisco.com/c/en/us/products/collateral/security/fireamp-private-cloud-virtual-appliance/datasheet-c78-742267.html

Question 9 Single choice

Which Cisco Advanced Malware Protection for Endpoints policy is used only for monitoring endpoint actively?

  1. A

    Windows domain controller

  2. B

    audit

  3. C

    triage

  4. D

    protection

Show answer and explanation

Correct answer: B

Explanation

References:
https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/214933-amp-for-endpoints-deployment-methodology.html

Question 10 Multiple choice

Refer to the exhibit.

An engineer is configuring access control rules on a Cisco Secure Firewall Threat Defense device. The access control rules must include a file policy with rules that will trigger when MSEXE files are accessed.

Which two actions must be configured in the access rule? (Choose two.)

  1. A

    block files with reset

  2. B

    interactive block

  3. C

    monitor

  4. D

    allow

  5. E

    trust

Show answer and explanation

Correct answers: A, C

Explanation

The first row in the exhibit shows an action for MSEXE files set to "Block Files with Reset". This action will block the MSEXE files and send a TCP reset to terminate the connection, effectively preventing the files from being accessed or downloaded.

The second row shows an action for MSEXE files set to "Detect Files". This is essentially a monitoring action that allows the system to log and detect MSEXE file access events without blocking them.

In this configuration, combining "Block Files with Reset" and "Detect Files" enables both blocking specific actions and monitoring file access, providing comprehensive control and visibility for MSEXE files.