Cisco 700-270 Online Practice Questions and Exam Preparation

Cisco 700-270 Online Questions & Answers

• Question 21:

  What are two challenges that are faced by traditional defense-in-depth security solutions? (Choose two.)

  A. Applying security policy is generally by manual and static methods
  B. They require that all components be provided by a single vendor
  C. Large amounts of logged data lead to poor threat visibility.
  D. They mandate network change control
  E. Security services must be outsourced.
  B. They require that all components be provided by a single vendor
  C. Large amounts of logged data lead to poor threat visibility.

• Question 22:

  Which statement is true when describing the current threat landscape?

  A. Threats can be prevented by not enabling BYOD services
  B. Threats can be prevented using proactive static policies.
  C. All companies connect to domains that host malicious files or services.
  D. If a threat is discovered within the first 24 hours, it can be contained.
  C. All companies connect to domains that host malicious files or services.

• Question 23:

  How is traffic forwarded from the Cisco ASA to the FirePOWER services module for analysis?

  A. The SFR is transparent and automatically sees all traffic.
  B. A service policy redirects traffic from the Cisco ASA packet-processing path to the SFR
  C. The SFR has a dedicated data interface
  D. The SFR is a standalone appliance that is inserted inline in the data path
  B. A service policy redirects traffic from the Cisco ASA packet-processing path to the SFR

• Question 24:

  Which ruleset is used to define FirePOWER services NGIPS policies?

  A. Talos
  B. Clam
  C. Snort
  D. Sniffer
  C. Snort

• Question 25:

  Which performance factor is most relevant to traffic that is destined to a data center'?

  A. focused on Internet edge traffic
  B. smaller, fast transactions such as HTTP
  C. more likelihood of malicious traffic requiring more logging
  D. focused on internal traffic
  A. focused on Internet edge traffic

• Question 26:

  Which activity leads to better network visibility?

  A. adding time stamps to log events
  B. enabling all IPS signatures
  C. adding user context to events
  D. forwarding all events to a syslog server
  C. adding user context to events

• Question 27:

  Which type of Cisco services offering is aimed at helping customers to plan and upgrade new FirePOWER deployments?

  A. Cisco Advanced Services
  B. Cisco Managed Services
  C. Cisco SMARTnet
  D. Cisco Migration Services
  D. Cisco Migration Services

• Question 28:

  Which FirePOWER services capability supports seamless processing after an adaptive security appliance stateful failover event?

  A. midsession pickup
  B. TCP intercept
  C. SFR stateful failover
  D. FireSIGHT central policy distribution
  A. midsession pickup

• Question 29:

  What is the advantage of leveraging an external intelligence source for security policy?

  A. provision of industry-best practices document
  B. provision of software upgrades and bug fixes
  C. provision of real-time dynamic analytics
  D. provision of outsourced security personnel
  C. provision of real-time dynamic analytics

• Question 30:

  Which two high-availability deployment modes support FirePOWER services? (Choose two.)

  A. monitor mode
  B. clustering
  C. active/standby
  D. multicontext
  E. active/active
  B. clustering
  C. active/standby