Cisco 300-710 Online Practice Questions and Exam Preparation

Cisco 300-710 Online Questions & Answers

• Question 141:

  An engineer is integrating Cisco Secure Endpoint with Cisco Secure Firewall Management Center in high availability mode. Malware events detected by Secure Endpoint must also be

  received by Secure Firewall Management Center and public cloud services are used. Which two configurations must be selected on both high availability peers independently? (Choose two.)

  A. internet connection
  B. Smart Software Manager Satellite
  C. Cisco Success Network
  D. security group tag
  E. Secure Endpoint Cloud Connection
  A. internet connection
  E. Secure Endpoint Cloud Connection

• Question 142:

  Which action should be taken after editing an object that is used inside an access control policy?

  A. Delete the existing object in use.
  B. Refresh the Cisco FMC GUI for the access control policy.
  C. Redeploy the updated configuration.
  D. Create another rule using a different object name.
  C. Redeploy the updated configuration.

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config-guide-v63/reusable_objects.html

• Question 143:

  Cisco SecureX is classified as which type of threat detection and response solution?

  A. MDR
  B. EDR
  C. XDR
  D. NDR
  C. XDR

• Question 144:

  What is the advantage of having Cisco Firepower devices send events to Cisco Threat Response via the security services exchange portal directly as opposed to using syslog?

  A. Firepower devices do not need to be connected to the Internet.
  B. An on-premises proxy server does not need to set up and maintained.
  C. All types of Firepower devices are supported.
  D. Supports all devices that are running supported versions of Firepower
  B. An on-premises proxy server does not need to set up and maintained.

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/security/firepower/integrations/CTR/ Firepower_and_Cisco_Threat_Response_Integration_Guide.pdf

• Question 145:

  Which two deployment types support high availability? (Choose two.)

  A. transparent
  B. routed
  C. clustered
  D. intra-chassis multi-instance
  E. virtual appliance in public cloud
  A. transparent
  B. routed

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/firepower_threat_defense_high_availability.html

• Question 146:

  

  Refer to the exhibit. An engineer analyzes a Network Risk Report from Cisco Secure Firewall Management Center. What should the engineer recommend implementing to mitigate the risk?

  A. IP address and URL blacklisting
  B. Trend analysis
  C. Network-based detection
  D. Virtual protection
  C. Network-based detection

• Question 147:

  A security engineer found a suspicious file from an employee email address and is trying to upload it for analysis, however the upload is failing. The last registration status is still active. What is the cause for this issue?

  A. Cisco AMP for Networks is unable to contact Cisco Threat Grid on premise.
  B. Cisco AMP for Networks is unable to contact Cisco Threat Grid Cloud.
  C. There is a host limit set.
  D. The user agent status is set to monitor.
  B. Cisco AMP for Networks is unable to contact Cisco Threat Grid Cloud.

• Question 148:

  There is an increased amount of traffic on the network and for compliance reasons, management needs visibility into the encrypted traffic. What is a result of enabling TLS/SSL decryption to allow this visibility?

  A. It prompts the need for a corporate managed certificate.
  B. It will fail if certificate pinning is not enforced.
  C. It has minimal performance impact.
  D. It is not subject to any Privacy regulations.
  A. It prompts the need for a corporate managed certificate.

• Question 149:

  A security engineer is configuring an Access Control Policy for multiple branch locations. These locations share a common rule set and utilize a network object called INSIDE_NET which contains the locally significant internal network subnets

  at each location.

  What technique will retain the policy consistency at each location but allow only the locally significant network subnet within the applicable rules?

  A. utilizing policy inheritance
  B. utilizing a dynamic ACP that updates from Cisco Talos Eba
  C. creating a unique ACP per device.
  D. creating an ACP with an INSIDE_NET network object and object overrides.
  D. creating an ACP with an INSIDE_NET network object and object overrides.

• Question 150:

  DRAG DROP

  Drag and drop the steps to restore an automatic device registration failure on the standby Cisco FMC from the left into the correct order on the right. Not all options are used.

  Select and Place:

  

  

  ---

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/firepower_management_center_high_availability.html#id_32288