13 July, 2020

Up To Date 300-710 Free Exam Questions For Securing Networks With Cisco Firepower (SNCF) Certification

It is impossible to pass Cisco 300-710 exam without any help in the short term. Come to Exambible soon and find the most advanced, correct and guaranteed Cisco 300-710 practice questions. You will get a surprising result by our Avant-garde Securing Networks with Cisco Firepower (SNCF) practice guides.

Online 300-710 free questions and answers of New Version:

Page: 1 / 0

Total 0 questions Full Exam Access

Question 1

What is a result of enabling Cisco FTD clustering?

For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections.

Integrated Routing and Bridging is supported on the master unit.

Site-to-site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails.

All Firepower appliances can support Cisco FTD clustering.

Question 2

Which two deployment types support high availability? (Choose two.)

transparent

routed

clustered

intra-chassis multi-instance

virtual appliance in public cloud

Question 3

Which two types of objects are reusable and supported by Cisco FMC? (Choose two.)

dynamic key mapping objects that help link HTTP and HTTPS GET requests to Layer 7 application protocols.

reputation-based objects that represent Security Intelligence feeds and lists, application filters based on category and reputation, and file lists

network-based objects that represent IP address and networks, port/protocols pairs, VLAN tags, security zones, and origin/destination country

network-based objects that represent FQDN mappings and networks, port/protocol pairs, VXLAN tags, security zones and origin/destination country

reputation-based objects, such as URL categories

Question 4

Which limitation applies to Cisco Firepower Management Center dashboards in a multidomain environment?

Child domains can view but not edit dashboards that originate from an ancestor domain.

Child domains have access to only a limited set of widgets from ancestor domains.

Only the administrator of the top ancestor domain can view dashboards.

Child domains cannot view dashboards that originate from an ancestor domain.

Question 5

How many report templates does the Cisco Firepower Management Center support?

unlimited

Question 6

Which report template field format is available in Cisco FMC?

box lever chart

arrow chart

bar chart

benchmark chart

Question 7

A network engineer is configuring URL Filtering on Firepower Threat Defense. Which two port requirements on the Firepower Management Center must be validated to allow communication with the cloud service? (Choose two.)

outbound port TCP/443

inbound port TCP/80

outbound port TCP/8080

inbound port TCP/443

outbound port TCP/80

Question 8

Which action should you take when Cisco Threat Response notifies you that AMP has identified a file as malware?

Add the malicious file to the block list.

Send a snapshot to Cisco for technical support.

Forward the result of the investigation to an external threat-analysis engine.

Wait for Cisco Threat Response to automatically block the malware.

Question 9

When do you need the file-size command option during troubleshooting with packet capture?

when capture packets are less than 16 MB

when capture packets are restricted from the secondary memory

when capture packets exceed 10 GB

when capture packets exceed 32 MB

Question 10

In a Cisco AMP for Networks deployment, which disposition is returned if the cloud cannot be reached?

unavailable

unknown

clean

disconnected

Question 11

Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)

The units must be the same version

Both devices can be part of a different group that must be in the same domain when configured within the FMC.

The units must be different models if they are part of the same series.

The units must be configured only for firewall routed mode.

The units must be the same model.

Question 12

Which protocol establishes network redundancy in a switched Firepower device deployment?

STP

HSRP

GLBP

VRRP

Question 13

What is the difference between inline and inline tap on Cisco Firepower?

Inline tap mode can send a copy of the traffic to another device.

Inline tap mode does full packet capture.

Inline mode cannot do SSL decryption.

Inline mode can drop malicious traffic.

Question 14

When creating a report template, how can the results be limited to show only the activity of a specific subnet?

Create a custom search in Firepower Management Center and select it in each section of the report.

Add an Input Parameter in the Advanced Settings of the report, and set the type to Network/IP.

Add a Table View section to the report with the Search field defined as the network in CIDR format.

Select IP Address as the X-Axis in each section of the report.

Question 15

What is a functionality of port objects in Cisco FMC?

to mix transport protocols when setting both source and destination port conditions in a rule

to represent protocols other than TCP, UDP, and ICMP

to represent all protocols in the same way

to add any protocol other than TCP or UDP for source port conditions in access control rules.

Question 16

In which two ways do access control policies operate on a Cisco Firepower system? (Choose two.)

Traffic inspection can be interrupted temporarily when configuration changes are deployed.

The system performs intrusion inspection followed by file inspection.

They can block traffic based on Security Intelligence data.

File policies use an associated variable set to perform intrusion prevention.

The system performs a preliminary inspection on trusted traffic to validate that it matches the trusted parameters.

Question 17

Which connector is used to integrate Cisco ISE with Cisco FMC for Rapid Threat Containment?

pxGrid

FTD RTC

FMC RTC

ISEGrid

Question 18

Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?

configure coredump packet-engine enable

capture-traffic

capture

capture WORD

Question 19

What is the result of specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?

The rate-limiting rule is disabled.

Matching traffic is not rate limited.

The system rate-limits all traffic.

The system repeatedly generates warnings.

Question 20

Which Cisco Firepower feature is used to reduce the number of events received in a period of time?

rate-limiting

suspending

correlation

thresholding

Question 21

Which action should be taken after editing an object that is used inside an access control policy?

Delete the existing object in use.

Refresh the Cisco FMC GUI for the access control policy.

Redeploy the updated configuration.

Create another rule using a different object name.

Question 22

Which two statements about deleting and re-adding a device to Cisco FMC are true? (Choose two.)

An option to re-apply NAT and VPN policies during registration is available, so users do not need to re-apply the policies after registration is completed.

Before re-adding the device in Cisco FMC, you must add the manager back in the device.

No option to delete and re-add a device is available in the Cisco FMC web interface.

The Cisco FMC web interface prompts users to re-apply access control policies.

No option to re-apply NAT and VPN policies during registration is available, so users need to re-apply the policies after registration is completed.

Question 23

What is a behavior of a Cisco FMC database purge?

User login and history data are removed from the database if the User Activity check box is selected.

Data can be recovered from the device.

The appropriate process is restarted.

The specified data is removed from Cisco FMC and kept for two weeks.

Question 24

Which command is run at the CLI when logged in to an FTD unit, to determine whether the unit is managed locally or by a remote FMC server?

system generate-troubleshoot

show configuration session

show managers

show running-config | include manager

Question 25

Which two remediation options are available when Cisco FMC is integrated with Cisco ISE? (Choose two.)

dynamic null route configured

DHCP pool disablement

quarantine

port shutdown

host shutdown

Page: 1 / 0

Total 0 questions Full Exam Access