Cisco 300-710 Online Practice Questions and Exam Preparation

Cisco 300-710 Online Questions & Answers

• Question 171:

  A company is in the process of deploying intrusion prevention with Cisco FTDs managed by a Cisco FMC. An engineer must configure policies to detect potential intrusions but not block the suspicious traffic Which action accomplishes this task?

  A. Configure IPS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by checking the "Drop when inline" option.
  B. Configure IPS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by unchecking the "Drop when inline" option.
  C. Configure IDS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by checking the "Drop when inline" option.
  D. Configure IDS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by unchecking the "Drop when inline" option.
  B. Configure IPS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by unchecking the "Drop when inline" option.

• Question 172:

  Which command is typed at the CLI on the primary Cisco FTD unit to temporarily stop running high-availability?

  A. configure high-availability resume
  B. configure high-availability disable
  C. system support network-options
  D. configure high-availability suspend
  D. configure high-availability suspend

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/firepower_threat_defense_high_availability.html

• Question 173:

  A company is deploying intrusion protection on multiple Cisco FTD appliances managed by Cisco FMC. Which system-provided policy must be selected if speed and detection are priorities?

  A. Maximum Detection
  B. Connectivity Over Security
  C. Security Over Connectivity
  D. Balanced Security and Connectivity
  D. Balanced Security and Connectivity

  ---

  https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config-guide-v63/overview_of_network_analysis_and_intrusion_policies.html#ID-2247-00000144

• Question 174:

  A network engineer must provide redundancy between two Cisco FTD devices. The redundancy configuration must include automatic configuration, translation, and connection updates. After the initial configuration of the two appliances, which two steps must be taken to proceed with the redundancy configuration? (Choose two.)

  A. Configure the virtual MAC address on the failover link.
  B. Disable hellos on the inside interface.
  C. Configure the standby IP addresses.
  D. Ensure the high availability license is enabled.
  E. Configure the failover link with stateful properties.
  C. Configure the standby IP addresses.
  E. Configure the failover link with stateful properties.

• Question 175:

  Which two statements about deleting and re-adding a device to Cisco FMC are true? (Choose two.)

  A. An option to re-apply NAT and VPN policies during registration is available, so users do not need to re-apply the policies after registration is completed.
  B. Before re-adding the device in Cisco FMC, you must add the manager back in the device.
  C. No option to delete and re-add a device is available in the Cisco FMC web interface.
  D. The Cisco FMC web interface prompts users to re-apply access control policies.
  E. There is no option to re-apply NAT and VPN policies during registration is available, so users need to re-apply the policies after registration is completed.
  D. The Cisco FMC web interface prompts users to re-apply access control policies.
  E. There is no option to re-apply NAT and VPN policies during registration is available, so users need to re-apply the policies after registration is completed.

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Device_Management_Basics.html

• Question 176:

  What is the difference between inline and inline tap on Cisco Firepower?

  A. Inline tap mode can send a copy of the traffic to another device.
  B. Inline tap mode does full packet capture.
  C. Inline mode cannot do SSL decryption.
  D. Inline mode can drop malicious traffic.
  D. Inline mode can drop malicious traffic.

  ---

  Explanation Explanation/Reference:INLINE TAP Copies the data to the SNORT Engine to be checked but then dropped while the actual data flow continues uninterrupted. Therefore, INLINE TAP does not send traffic to another device. The Data is copied but not captured. You still would need to enable packet capture to capture packets (AKA Save PCAP). INLINE: Both inline and Inline Tap mode do not support SSL Decryption-resign... Although im a bit conflicted by this.... Truth is that Inline Mode can DROP malicious traffic but remember that Inline TAP mode CANNOT. Agan this is because tap mode sends a copy of the data to be inspected but not the actual data.

• Question 177:

  An engineer must define a URL object on Cisco FMC.

  What is the correct method to specify the URL without performing SSL inspection?

  A. Use Subject Common Name value.
  B. Specify all subdomains in the object group.
  C. Specify the protocol in the object.
  D. Include all URLs from CRL Distribution Points.
  B. Specify all subdomains in the object group.

• Question 178:

  Which two considerations must be made when deleting and re-adding devices while managing them via Cisco FMC? (Choose two.)

  A. An option to re-apply NAT and VPN policies during registration is available, so users do not need to re-apply the policies after registration is completed.
  B. Before re-adding the device in Cisco FMC, the manager must be added back.
  C. Once a device has been deleted, it must be reconfigured before it is re-added to the Cisco FMC.
  D. The Cisco FMC web interface prompts users to re-apply access control policies.
  E. There is no option to re-apply NAT and VPN policies during registration available, so users need to re-apply the policies after registration is completed.
  D. The Cisco FMC web interface prompts users to re-apply access control policies.
  E. There is no option to re-apply NAT and VPN policies during registration available, so users need to re-apply the policies after registration is completed.

  ---

  https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Device_Management_Basics.html

• Question 179:

  An engineer is investigating connectivity problems on Cisco Firepower for a specific SGT. Which command allows the engineer to capture real packets that pass through the firewall using an SGT of 64?

  A. capture CAP type inline-tag 64 match ip any any
  B. capture CAP match 64 type inline-tag ip any any
  C. capture CAP headers-only type inline-tag 64 match ip any any
  D. capture CAP buffer 64 match ip any any
  A. capture CAP type inline-tag 64 match ip any any

• Question 180:

  Due to an Increase in malicious events, a security engineer must generate a threat report to include intrusion events, malware events, and security intelligence events. How Is this information collected in a single report?

  A. Run the default Firepower report.
  B. Export the Attacks Risk report.
  C. Generate a malware report.
  D. Create a Custom report.
  D. Create a Custom report.