Cisco 300-710 Online Practice Questions and Exam Preparation

Cisco 300-710 Online Questions & Answers

• Question 1:

  DRAG DROP

  Drag and drop the steps to restore an automatic device registration failure on the standby Cisco FMC from the left into the correct order on the right. Not all options are used.

  Select and Place:

  

  

  ---

  References:

  https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/firepower_management_center_high_availability.html#id_32288

• Question 2:

  Encrypted Visibility Engine (EVE) is enabled under which lab on an access control policy in Cisco Secure Firewall Management Centre?

  A. Network Analysis Policy
  B. Advanced
  C. Security Intelligence
  D. SSL
  B. Advanced

• Question 3:

  A security engineer must configure a Cisco FTD appliance to inspect traffic coming from the internet. The Internet traffic will be mirrored from the Cisco Catalyst 9300 Switch.

  Which configuration accomplishes the task?

  A. Set interface configuration mode to none.
  B. Set the firewall mode to transparent.
  C. Set the firewall mode to routed.
  D. Set interface configuration mode to passive.
  D. Set interface configuration mode to passive.

• Question 4:

  Which two TCP ports can allow the Cisco Firepower Management Center to communication with FireAMP cloud for file disposition information? (Choose two.)

  A. 8080
  B. 22
  C. 8305
  D. 32137
  E. 443
  D. 32137
  E. 443

• Question 5:

  Refer to the exhibit.

  

  An engineer is configuring access control rules on a Cisco Secure Firewall Threat Defense device. The access control rules must include a file policy with rules that will trigger when MSEXE files are accessed.

  Which two actions must be configured in the access rule? (Choose two.)

  A. block files with reset
  B. interactive block
  C. monitor
  D. allow
  E. trust
  A. block files with reset
  C. monitor

  ---

  Explanation

  The first row in the exhibit shows an action for MSEXE files set to "Block Files with Reset". This action will block the MSEXE files and send a TCP reset to terminate the connection, effectively preventing the files from being accessed or downloaded.

  The second row shows an action for MSEXE files set to "Detect Files". This is essentially a monitoring action that allows the system to log and detect MSEXE file access events without blocking them.

  In this configuration, combining "Block Files with Reset" and "Detect Files" enables both blocking specific actions and monitoring file access, providing comprehensive control and visibility for MSEXE files.

• Question 6:

  Which protocol is needed to exchange threat details in rapid threat containment on Cisco FMC?

  A. SGT
  B. SNMP v3
  C. BFD
  D. pxGrid
  D. pxGrid

• Question 7:

  A network engineer is planning on deploying a Cisco Secure Firewall Threat Defense Virtual appliance in transparent mode.

  Which two virtual environments support this configuration? (Choose two.)

  A. OSI
  B. AWS
  C. GCP
  D. KVM
  E. ESXi
  D. KVM
  E. ESXi

• Question 8:

  While configuring FTD, a network engineer wants to ensure that traffic passing though the appliance does not require routing or VLAN rewriting.

  Which interface mode should the engineer implement to accomplish this task?

  A. inline set
  B. passive
  C. transparent
  D. inline tap
  A. inline set

  ---

  Explanation

  An inline set acts like a bump on the wire, and binds two interfaces together to slot into an existing network. This function allows the FTD to be installed in any network environment without the configuration of adjacent network devices.

• Question 9:

  A network administrator configured a NAT policy that translates a public IP address to an internal web server IP address. An access policy has also been created that allows any source to reach the public IP address on port 80. The web server is still not reachable from the Internet on port 80.

  Which configuration change is needed?

  A. The intrusion policy must be disabled for port 80.
  B. The access policy rule must be configured for the action trust.
  C. The NAT policy must be modified to translate the source IP address as well as destination IP address.
  D. The access policy must allow traffic to the internal web server IP address.
  D. The access policy must allow traffic to the internal web server IP address.

• Question 10:

  An engineer is tasked with configuring a custom intrusion rule on Cisco Secure Firewall Management Center to detect and block the malicious traffic pattern with specific payload containing string "|04 68 72 80 87 ff ed cq fg he qm pn|".

  Which action must the Engineer configure on the IPS policy?

  A. reset
  B. drop
  C. alert
  D. disable
  E. quarantine
  B. drop