Cisco 300-710 Online Practice Questions and Exam Preparation

Cisco 300-710 Online Questions & Answers

• Question 261:

  An engineer must deny ICMP traffic to the networks of separate departments that use Cisco Secure Firewall Management Center. The engineer must use the same object on the relevant device for each network. What must be configured in Secure Firewall Management Center?

  A. Allow Overrides check box
  B. IP address
  C. Deny ICMP check box
  D. IP range
  A. Allow Overrides check box

  ---

  In Cisco Secure Firewall Management Center (FMC), if an engineer needs to apply the same object across multiple devices or networks but may want to configure specific settings for each device or network, they can use the "Allow Overrides" option. When the Allow Overrides checkbox is selected, it enables flexibility by allowing the object to have different configurations or values on different devices while still being centrally managed. This is useful when a single object is applied across multiple networks, as it lets the engineer tailor the settings for each department while maintaining consistency in object management.

• Question 262:

  What is the maximum bit size that Cisco FMC supports for HTTPS certificates?

  A. 1024
  B. 8192
  C. 4096
  D. 2048
  C. 4096

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/system_configuration.html

• Question 263:

  An engineer needs to configure remote storage on Cisco FMC. Configuration backups must be available from a secure location on the network for disaster recovery. Reports need to back up to a shared location that auditors can access with their Active Directory logins. Which strategy must the engineer use to meet these objectives?

  A. Use SMB for backups and NFS for reports.
  B. Use NFS for both backups and reports.
  C. Use SMB for both backups and reports.
  D. Use SSH for backups and NFS for reports.
  C. Use SMB for both backups and reports.

  ---

  https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/ system_configuration.html#ID-2241-00000551 "You cannot send backups to one remote system and reports to another, but you can choose to send either to a remote system and store the other on the Firepower Management Center."

• Question 264:

  What Software can be installed on the Cisco 4100 series appliance? (Choose two)

  A. FTD
  B. ASA
  C. ASAv
  D. FMC
  A. FTD
  B. ASA

• Question 265:

  An engineer is deploying failover capabilities for a pair of Cisco Secure Firewall devices. The core switch keeps the MAC address of the previously active unit in the ARP table. Which action must the engineer take to minimize downtime and ensure that network users keep access to the internet after a Cisco Secure Firewall failover?

  A. Set the same MAC address on both units.
  B. Add the MAC address to the switch ARP table.
  C. Run a script to send gratuitous ARP after a failover.
  D. Use a virtual MAC address on both units.
  D. Use a virtual MAC address on both units.

• Question 266:

  An engineer is investigating connectivity problems on Cisco Firepower that is using service group tags. Specific devices are not being tagged correctly, which is preventing clients from using the proper policies when going through the firewall. How is this issue resolved?

  A. Use traceroute with advanced options.
  B. Use Wireshark with an IP subnet filter.
  C. Use a packet capture with match criteria.
  D. Use a packet sniffer with correct filtering
  C. Use a packet capture with match criteria.

• Question 267:

  An organization has seen a lot of traffic congestion on their links going out to the internet. There is a Cisco Firepower device that processes all of the traffic going to the internet prior to leaving the enterprise. How is the congestion alleviated so that legitimate business traffic reaches the destination?

  A. Create a NAT policy so that the Cisco Firepower device does not have to translate as many addresses.
  B. Create a flexconfig policy to use WCCP for application aware bandwidth limiting.
  C. Create a QoS policy rate-limiting high bandwidth applications.
  D. Create a VPN policy so that direct tunnels are established to the business applications.
  C. Create a QoS policy rate-limiting high bandwidth applications.

• Question 268:

  What are 2 types or forms of suppression on a FirePower policy (or FTD)?

  A. source
  B. port
  C. rule
  D. protocol
  E. application
  A. source
  C. rule

• Question 269:

  An organization is migrating their Cisco ASA devices running in multicontext mode to Cisco FTD devices.

  Which action must be taken to ensure that each context on the Cisco ASA is logically separated in the Cisco FTD devices?

  A. Add a native instance to distribute traffic to each Cisco FTD context.
  B. Add the Cisco FTD device to the Cisco ASA port channels.
  C. Configure a container instance in the Cisco FTD for each context in the Cisco ASA.
  D. Configure the Cisco FTD to use port channels spanning multiple networks.
  C. Configure a container instance in the Cisco FTD for each context in the Cisco ASA.

• Question 270:

  Which command is entered in the Cisco FMC CLI to generate a troubleshooting file?

  A. show running-config
  B. show tech-support chassis
  C. system support diagnostic-cli
  D. sudo sf_troubleshoot.pl
  D. sudo sf_troubleshoot.pl

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/support/docs/security/sourcefire-defense-center/117663-technote-SourceFire-00.html