Cisco 300-710 Online Practice Questions and Exam Preparation

Cisco 300-710 Online Questions & Answers

• Question 341:

  A network administrator is configuring a transparent Cisco Secure Firewall Threat Defense registered to a Cisco Secure Firewall Management Center. The administrator wants to configure the Secure Firewall Threat Defense to allow ARP traffic to pass between two interfaces of a bridge group. What must be configured?

  A. Use the default configuration on the devices.
  B. An access policy must allow MAC address 0100.0CCC.CCCD.
  C. ARP inspection must be disabled.
  D. An access policy must allow MAC address FFFF.FFFF.FFFF.
  A. Use the default configuration on the devices.

• Question 342:

  A network administrator is configuring a BVI interface on a routed FTD. The administrator wants to isolate traffic on the interfaces connected to the bridge group and not have the FTD route this traffic using the routing table. What must be configured?

  A. A new VRF must be created for the BVI interface
  B. An IP address must be configured on the BVI
  C. IP routing must be removed from the physical interfaces connected to the BVI
  D. The BVI interface must be configured for transparent mode
  A. A new VRF must be created for the BVI interface

• Question 343:

  Upon detecting a flagrant threat on an endpoint, which two technologies instruct Cisco Identity Services Engine to contain the infected endpoint either manually or automatically? (Choose two.)

  A. Cisco ASA 5500 Series
  B. Cisco FMC
  C. Cisco AMP
  D. Cisco Stealthwatch
  E. Cisco ASR 7200 Series
  B. Cisco FMC
  C. Cisco AMP

• Question 344:

  An engineer is tasked with configuring a custom intrusion rule on Cisco Secure Firewall Management Center to detect and block the malicious traffic pattern with specific payload containing string "|04 68 72 80 87 ff ed cq fg he qm pn|". Which action must the Engineer configure on the IPS policy?

  A. reset
  B. drop
  C. alert
  D. disable
  E. quarantine
  B. drop

• Question 345:

  A network administrator is reviewing a packet capture. The packet capture from inside of Cisco Secure Firewall Threat Defense shows the inbound TCP traffic. However, the outbound TCP traffic is not seen in the packet capture from outside Secure Firewall Threat Defense. Which configuration change resolves the issue?

  A. Packet capture must include UDP traffic.
  B. Inside interface must be assigned a higher security level.
  C. Route to the destination must be added.
  D. Inside interface must be assigned a lower security level.
  C. Route to the destination must be added.

• Question 346:

  A network administrator is configuring SNORT inspection policies and is seeing failed deployment messages in Cisco FMC. What information should the administrator generate for Cisco TAC to help troubleshoot?

  A. A "troubleshoot" file for the device in question.
  B. A "show tech" file for the device in question.
  C. A "troubleshoot" file for the Cisco FMC.
  D. A "show tech" for the Cisco FMC.
  A. A "troubleshoot" file for the device in question.

  ---

  https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/troubleshooting_the_system.html

• Question 347:

  An engineer is creating an URL object on Cisco FMC. How must it be configured so that the object will match for HTTPS traffic in an access control policy?

  A. Specify the protocol to match (HTTP or HTTPS).
  B. Use the FQDN including the subdomain for the website.
  C. Use the subject common name from the website certificate.
  D. Define the path to the individual webpage that uses HTTPS.
  C. Use the subject common name from the website certificate.

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config-guide-v63/url_filtering.html

• Question 348:

  A network administrator discovers that a user connected to a file server and downloaded a malware file. The Cisco FMC generated an alert for the malware event, however the user still remained connected. Which Cisco AMP file rule action within the Cisco FMC must be set to resolve this issue?

  A. Malware Cloud Lookup
  B. Reset Connection
  C. Detect Files
  D. Local Malware Analysis
  B. Reset Connection

  ---

  https://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa-firepower-module-user-guide-v541/AMP-Config.pdf

• Question 349:

  An engineer is configuring a custom intrusion rule on Cisco FMC. The engineer needs the rule to search the payload or stream for the string "|45 5* 26 27 4 0A|*. Which Keyword must the engineer use with this stung lo create an argument for packed inspection?

  A. metadata
  B. Content
  C. Protected _ content
  D. data
  B. Content

  ---

  The content keyword is used to specify a string or pattern to search for in the payload or stream of a packet. The string must be enclosed in quotation marks and can use modifiers such as nocase, depth, offset, and so on. The string can also use hexadecimal notation by using a pipe symbol (|) before and after the hexadecimal characters. For example, content:"|45 5* 26 27 4 0A|" will match any payload or stream that contains the hexadecimal bytes 45 5 26 27 4 0A followed by any number of bytes2

• Question 350:

  Encrypted Visibility Engine (EVE) is enabled under which lab on an access control policy in Cisco Secure Firewall Management Centre?

  A. Network Analysis Policy
  B. Advanced
  C. Security Intelligence
  D. SSL
  B. Advanced