Cisco 300-710 Online Practice Questions and Exam Preparation

Cisco 300-710 Online Questions & Answers

• Question 151:

  Which default action setting in a Cisco FTD Access Control Policy allows all traffic from an undefined application to pass without Snort Inspection?

  A. Trust All Traffic
  B. Inherit from Base Policy
  C. Network Discovery Only
  D. Intrusion Prevention
  A. Trust All Traffic

  ---

  The default action setting in a Cisco FTD Access Control Policy determines how the system handles and logs traffic that is not handled by any other access control configuration. The default action can block or trust all traffic without further inspection, or inspect traffic for intrusions and discovery data3. The Trust All Traffic option allows all traffic from an undefined application to pass without Snort inspection. This option also disables Security Intelligence filtering, file and malware inspection, and URL filtering for all traffic handled by the default action. This option is useful when you want to minimize the performance impact of access control on your network3. The other options are incorrect because: The Inherit from Base Policy option inherits the default action setting from the base policy. The base policy is the predefined access control policy that you use as a starting point for creating your own policies. Depending on which base policy you choose, the inherited default action setting can be different3. The Network Discovery Only option inspects all traffic for discovery data only. This option enables Security Intelligence filtering for all traffic handled by the default action, but disables file and malware inspection, URL filtering, and intrusion inspection. This option is useful when you want to collect information about your network before you configure access control rules3. The Intrusion Prevention option inspects all traffic for intrusions and discovery data. This option enables Security Intelligence filtering, file and malware inspection, URL filtering, and intrusion inspection for all traffic handled by the default action. This option provides the most comprehensive protection for your network, but also has the most performance impact3.

• Question 152:

  A network engineer must monitor threat events from the console of Cisco Secure Firewall Management Center. The engineer integrates the Cisco Secure Firewall Malware Defense in Secure Firewall Management Center. Which action must the engineer take next?

  A. Log in to Cisco Secure Endpoint, click Allow to authorize the Secure Firewall Malware Defense to Secure FMC connection, and add a Secure Firewall Malware Defense cloud connection to Secure FMC.
  B. Log in to Secure Endpoint, click Allow to authorize the Secure Firewall Malware Defense to Secure FMC connection, add a Secure Firewall Malware Defense cloud connection to Secure FMC, and select the Secure Firewall Malware Defense cloud for Secure Endpoint.
  C. Add a Secure Firewall Malware Defense cloud connection in Secure FMC, log in to Secure Endpoint, and click Allow to authorize the Secure Firewall Malware Defense to Secure FMC connection.
  D. Add a Secure Firewall Malware Defense cloud connection in Secure FMC, select the Secure Firewall Malware Defense cloud for Secure Endpoint, log in to Secure Endpoint, and click Allow to authorize the Secure Firewall Malware Defense to Secure FMC connection.
  D. Add a Secure Firewall Malware Defense cloud connection in Secure FMC, select the Secure Firewall Malware Defense cloud for Secure Endpoint, log in to Secure Endpoint, and click Allow to authorize the Secure Firewall Malware Defense to Secure FMC connection.

• Question 153:

  An organization is setting up two new Cisco FTD devices to replace their current firewalls and cannot have any network downtime. During the setup process, the synchronization between the two devices is failing. What action is needed to resolve this issue?

  A. Confirm that both devices are running the same software version.
  B. Confirm that both devices are configured with the same types of interfaces.
  C. Confirm that both devices have the same flash memory sizes.
  D. Confirm that both devices have the same port-channel numbering.
  A. Confirm that both devices are running the same software version.

  ---

  https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/firepower_threat_defense_high_availability.html#Cisco_Reference.dita_cc8821d8-a5a5-49c0-97fd-dc9b6f7dbad2

• Question 154:

  A Cisco FTD has two physical interfaces assigned to a BVI. Each interface is connected to a different VLAN on the same switch.

  Which firewall mode is the Cisco FTD set up to support?

  A. active/active failover
  B. transparent
  C. routed
  D. high availability clustering
  C. routed

• Question 155:

  Which Cisco Advanced Malware Protection for Endpoints policy is used only for monitoring endpoint actively?

  A. Windows domain controller
  B. audit
  C. triage
  D. protection
  B. audit

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/214933-amp-for-endpoints-deployment-methodology.html

• Question 156:

  A security engineer must configure a Cisco FTD appliance to inspect traffic coming from the internet. The internet traffic will be mirrored from the Cisco Catalyst 9300 Switch. Which configuration accomplishes the task?

  A. Set the firewall mode to routed.
  B. Set interface configuration mode to passive.
  C. Set the firewall mode to transparent.
  D. Set interface configuration mode to none.
  B. Set interface configuration mode to passive.

• Question 157:

  What is the RTC workflow when the infected endpoint is identified?

  A. Cisco ISE instructs Cisco AMP to contain the infected endpoint.
  B. Cisco ISE instructs Cisco FMC to contain the infected endpoint.
  C. Cisco FMC instructs Cisco ISE to contain the infected endpoint.
  D. Cisco AMP instructs Cisco FMC to contain the infected endpoint.
  C. Cisco FMC instructs Cisco ISE to contain the infected endpoint.

• Question 158:

  A network engineer is planning on deploying a Cisco Secure Firewall Threat Defense Virtual appliance in transparent mode. Which two virtual environments support this configuration? (Choose two.)

  A. OSI
  B. AWS
  C. GCP
  D. KVM
  E. ESXi
  D. KVM
  E. ESXi

• Question 159:

  A network engineer must configure an existing firewall to have a NAT configuration. The new configuration must support more than two interfaces per context. The firewall has previously been operating in transparent mode. The Cisco Secure Firewall Threat Defense (FTD) device has been deregistered from Cisco Secure Firewall Management Center (FMC). Which set of configuration actions must the network engineer take next to meet the requirements?

  A. Run the configure firewall routed command from the Secure FTD device CLI, and reregister with Secure FMC.
  B. Run the configure manager add routed command from the Secure FMC CLI, and reregister with Secure FMC.
  C. Run the configure manager add routed command from the Secure FTD device CLI, and reregister with Secure FMC.
  D. Run the configure firewall routed command from the Secure FMC CLI, and reregister with Secure FMC.
  A. Run the configure firewall routed command from the Secure FTD device CLI, and reregister with Secure FMC.

  ---

  To support more than two interfaces per context and enable NAT configurations, the firewall must operate in routed mode. Since the firewall was previously in transparent mode, the network engineer needs to change it to routed mode. Steps: Access the CLI of the Secure FTD device. Run the command configure firewall routed to switch the firewall from transparent mode to routed mode. Reregister the FTD device with the FMC by running the configure manager add command from the FTD device CLI. This will ensure that the firewall can support the required NAT configurations and more than two interfaces per context. References: Cisco Secure Firewall Management Center Device Configuration Guide, Chapter on Routed Mode Configuration.

• Question 160:

  A company is deploying AMP private cloud. The AMP private cloud instance has already been deployed by the server administrator. The server administrator provided the hostname of the private cloud instance to the network engineer via email. What additional information does the network engineer require from the server administrator to be able to make the connection to the AMP private cloud in Cisco FMC?

  A. SSL certificate for the AMP private cloud instance
  B. Username and password to the AMP private cloud instance
  C. IP address and port number for the connection proxy
  D. Internet access for the AMP private cloud to reach the AMP public cloud
  A. SSL certificate for the AMP private cloud instance