Cisco 300-710 Online Practice Questions and Exam Preparation

Cisco 300-710 Online Questions & Answers

• Question 441:

  Refer to the following informations:

  Phase: 16

  Type: SNORT

  Subtype:

  Result: DROP

  Config:

  Additional Information:

  Snort Trace:

  Packet: ICMP

  Session: new snort session

  Firewall: Starting rule matching, zone 4 -> 1, geo 0 -> e, vlan 0, sgt 0, src sgt type 0, dest_sgt_tag 0, dest sgt type 0, username `No Authentication Required',, ICMP Type: 8, icmpCode 0 Firewall: block rule, `ping', drop Snort: processed

  decoder alerts or actions queue, drop Snort id: 0, NAP: id 2, IPS ID: 0, Verdict: BLACKLIST, Blocked by Firewall Snort Verdict: (black-list) blacklist this flow

  Result:

  Input-interface: ACCESS41_Inside1

  Input-status: up

  Input-line-status: up

  Action: drop

  Drop-reason: (firewall) Blocked or blacklisted by the Firewall preprocessor, Drop-location, frame 0x000055d2b0fsb7c0 flow (NA)/NA A systems administrator conducts a connectivity test to their SCCM server from a host machine and gets no response from the server.

  Which action ensures that the ping packets reach the destination and that the host receives replies?

  A. Create an access control policy rule that allows ICMP traffic.
  B. Configure a custom Snort signature to allow ICMP traffic after Inspection.
  C. Modify the Snort rules to allow ICMP traffic.
  D. Create an ICMP allow list and add the ICMP destination to remove it from the implicit deny list.
  A. Create an access control policy rule that allows ICMP traffic.

• Question 442:

  An engineer must configure an ERSPAN passive interface on a Cisco Secure IPS by using the Cisco Secure Firewall Management Center. These configurations have been performed already:

  Configure the passive interface. Configure the ERSPAN IP address.

  Which two additional settings must be configured to complete the configuration? (Choose two.)

  A. Source IP
  B. Bypass Mode
  C. TCP Intercept
  D. Flow ID
  E. Destination MAC
  C. TCP Intercept
  D. Flow ID

• Question 443:

  An engineer must integrate a third-party security intelligence feed with Cisco Secure Firewall Management Center. Secure Firewall Management Center is running Version 6.2.3 and has 8 GB of memory.

  Which two actions must be taken to implement Threat Intelligence Director? (Choose two.)

  A. Upgrade to version 6.6.
  B. Enable REST API access.
  C. Add the URL of the TAXII server.
  D. Add 7 GB of memory.
  E. Add a TAXII server
  B. Enable REST API access.
  D. Add 7 GB of memory.

• Question 444:

  An engineer must investigate a connectivity issue and decides to use the packet capture feature on Cisco FTD. The goal is to see the real packet going through the Cisco FTD device and see Snort detection actions as a part of the output.

  After the capture-traffic command is issued, only the packets are displayed.

  Which action resolves this issue?

  A. Specify the trace using the -T option after the capture-traffic command
  B. Perform the trace within the Cisco FMC GUI instead of the Cisco FMC CLI
  C. Use the verbose option as a part of the capture-traffic command
  D. Use the capture command and specify the trace option to get the required information
  D. Use the capture command and specify the trace option to get the required information

• Question 445:

  An engineer is deploying Cisco Secure Endpoint for the first time and on endpoint with MAC address 50:54:15:04:0:AB. The engineer must make sure that during the testing phase no files are isolated and network connections must not be blocked.

  Which policy type must be configured to accomplish the task?

  A. Triage
  B. Quarantine
  C. Protect
  D. Audit
  D. Audit

• Question 446:

  A network engineer must provide redundancy between two Cisco FTD devices. The redundancy configuration must include automatic configuration, translation, and connection updates.

  After the initial configuration of the two appliances, which two steps must be taken to proceed with the redundancy configuration? (Choose two.)

  A. Configure the virtual MAC address on the failover link.
  B. Disable hellos on the inside interface.
  C. Configure the standby IP addresses.
  D. Ensure the high availability license is enabled.
  E. Configure the failover link with stateful properties.
  C. Configure the standby IP addresses.
  E. Configure the failover link with stateful properties.

• Question 447:

  Which license type is required on Cisco ISE to integrate with Cisco FMC pxGrid?

  A. apex
  B. plus
  C. base
  D. mobility
  B. plus

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_0111.html#concept_DE1C38E055794B198ED352D1528B5182