Cisco CCNP 300-710 Questions & Answers

• Question 11:

  A Cisco FTD has two physical interfaces assigned to a BVI. Each interface is connected to a different VLAN on the same switch. Which firewall mode is the Cisco FTD set up to support?

  A. active/active failover

  B. transparent

  C. routed

  D. high availability clustering

  Correct Answer: C

• Question 12:

  DRAG DROP

  Drag and drop the steps to restore an automatic device registration failure on the standby Cisco FMC from the left into the correct order on the right. Not all options are used.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/firepower_management_center_high_availability.html#id_32288

• Question 13:

  An engineer is reviewing a ticket that requests to allow traffic for some devices that must connect to a server over 8699/udp. The request mentions only one IP address, 172.16.18.15, but the requestor asked for the engineer to open the port for all machines that have been trying to connect to it over the last week.

  Which action must the engineer take to troubleshoot this issue?

  A. Use the context explorer to see the application blocks by protocol.

  B. Use the context explorer to see the destination port blocks

  C. Filter the connection events by the source port 8699/udp.

  D. Filter the connection events by the destination port 8699/udp.

  Correct Answer: D

• Question 14:

  While integrating Cisco Umbrella with Cisco Threat Response, a network security engineer wants to automatically push blocking of domains from the Cisco Threat Response interface to Cisco Umbrella. Which API meets this requirement?

  A. investigate

  B. reporting

  C. enforcement

  D. REST

  Correct Answer: D

• Question 15:

  A security engineer is configuring a remote Cisco FTD that has limited resources and internet bandwidth. Which malware action and protection option should be configured to reduce the requirement for cloud lookups?

  A. Malware Cloud Lookup and dynamic analysis

  B. Block Malware action and dynamic analysis

  C. Block Malware action and local malware analysis

  D. Block File action and local malware analysis

  Correct Answer: C

• Question 16:

  Which firewall design allows a firewall to forward traffic at layer 2 and layer 3 for the same subnet?

  A. Cisco Firepower Threat Defense mode

  B. transparent mode

  C. routed mode

  D. integrated routing and bridging

  Correct Answer: D

• Question 17:

  An analyst is reviewing the Cisco FMC reports for the week. They notice that some peer-to- peer applications are being used on the network and they must identify which poses the greatest risk to the environment. Which report gives the analyst this information?

  A. Attacks Risk Report

  B. User Risk Report

  C. Network Risk Report

  D. Advanced Malware Risk Report

  Correct Answer: C

• Question 18:

  A network administrator is concerned about the high number of malware files affecting users’ machines. What must be done within the access control policy in Cisco FMC to address this concern?

  A. Create an intrusion policy and set the access control policy to block

  B. Create an intrusion policy and set the access control policy to allow

  C. Create a file policy and set the access control policy to allow

  D. Create a file policy and set the access control policy to block

  Correct Answer: D

• Question 19:

  An engineer integrates Cisco FMC and Cisco ISE using pxGrid. Which role is assigned for Cisco FMC?

  A. server

  B. controller

  C. publisher

  D. client

  Correct Answer: D

  Reference: https://www.ciscopress.com/articles/article.asp?p=2963461andseqNum=2

• Question 20:

  A company wants a solution to aggregate the capacity of two Cisco FTD devices to make the best use of resources such as bandwidth and connections per second. Which order of steps must be taken across the Cisco FTDs with Cisco FMC to meet this requirement?

  A. Add members to the Cisco FMC, configure Cisco FTD interfaces, create the cluster in Cisco FMC, and configure cluster members in Cisco FMC

  B. Add members to Cisco FMC, configure Cisco FTD interfaces in Cisco FMC, configure cluster members in Cisco FMC, create cluster in Cisco FMC, and configure cluster members in Cisco FMC

  C. Configure the Cisco FTD interfaces, add members to FMC, configure cluster members in FMC, and create cluster in Cisco FMC

  D. Configure the Cisco FTD interfaces and cluster members, add members to Cisco FMC, and create the cluster in Cisco FMC

  Correct Answer: A