2022 Latest 100% Exam Passing Ratio - 300-710 Dumps PDF
Pass Exam With Full Sureness - 300-710 Dumps with 187 Questions
NEW QUESTION 54
An engineer currently has a Cisco FTD device registered to the Cisco FMC and is assigned the address of 10 10.50.12. The organization is upgrading the addressing schemes and there is a requirement to convert the addresses to a format that provides an adequate amount of addresses on the network What should the engineer do to ensure that the new addressing takes effect and can be used for the Cisco FTD to Cisco FMC connection?
- A. Format and reregister the device to Cisco FMC.
- B. Update the IP addresses from IFV4 to IPv6 without deleting the device from Cisco FMC
- C. Delete and reregister the device to Cisco FMC
- D. Cisco FMC does not support devices that use IPv4 IP addresses.
Answer: B
NEW QUESTION 55
While configuring FTD, a network engineer wants to ensure that traffic passing through the appliance does not require routing or Vlan rewriting. Which interface mode should the engineer implement to accomplish this task?
- A. Inline set
- B. passive
- C. transparent
- D. Inline tap
Answer: B
NEW QUESTION 56
Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD? (Choose two.)
- A. area boundary router type 1 LSA filtering
- B. SHA authentication to OSPF packets
- C. virtual links
- D. MD5 authentication to OSPF packets
- E. OSPFv2 with IPv6 capabilities
Answer: C,D
NEW QUESTION 57
A network engineer is logged into the Cisco AMP for Endpoints console and sees a malicious verdict for an identified SHA-256 hash. Which configuration is needed to mitigate this threat?
- A. Use regular expressions to block the malicious file.
- B. Enable a personal firewall in the infected endpoint.
- C. Add the hash from the infected endpoint to the network block list.
- D. Add the hash to the simple custom detection list.
Answer: D
NEW QUESTION 58
A network engineer is configuring URL Filtering on Firepower Threat Defense. Which two port requirements on the Firepower Management Center must be validated to allow communication with the cloud service? (Choose two.)
- A. outbound port TCP/8080
- B. outbound port TCP/443
- C. inbound port TCP/80
- D. outbound port TCP/80
- E. inbound port TCP/443
Answer: B,D
Explanation:
Section: Management and Troubleshooting
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide- v60/Security__Internet_Access__and_Communication_Ports.html
NEW QUESTION 59
Which command is run at the CLI when logged in to an FTD unit, to determine whether the unit is managed locally or by a remote FMC server?
- A. system generate-troubleshoot
- B. show managers
- C. show configuration session
- D. show running-config | include manager
Answer: B
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/command_ref/b_Command_Reference_for_Firepower_Threat_Defense/c_3.html
NEW QUESTION 60
Which two dynamic routing protocols are supported in Firepower Threat Defense without using FlexConfig? (Choose two.)
- A. static routing
- B. IS-IS
- C. EIGRP
- D. BGP
- E. OSPF
Answer: A,D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/660/fdm/fptd-fdm-config-guide-660/fptd- fdm-routing.html
NEW QUESTION 61
An engineer is attempting to add a new FTD device to their FMC behind a NAT device with a NAT ID of ACME001 and a password of Cisco388267669. Which command set must be used in order to accomplish this?
- A. configure manager add <FMC IP> registration key> ACME001
- B. configure manager add DONTRESOLVE <FMC IP> AMCE001 <registration key>
- C. configure manager add ACME001 <registration key> <FMC IP>
- D. configure manager add <FMC IP> ACME0O1 <registration key>
Answer: A
NEW QUESTION 62
What is a functionality of port objects in Cisco FMC?
- A. to represent all protocols in the same way
- B. to add any protocol other than TCP or UDP for source port conditions in access control rules.
- C. to mix transport protocols when setting both source and destination port conditions in a rule
- D. to represent protocols other than TCP, UDP, and ICMP
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/reusable_objects.html
NEW QUESTION 63
Which limitation applies to Cisco Firepower Management Center dashboards in a multidomain environment?
- A. Only the administrator of the top ancestor domain can view dashboards.
- B. Child domains have access to only a limited set of widgets from ancestor domains.
- C. Child domains can view but not edit dashboards that originate from an ancestor domain.
- D. Child domains cannot view dashboards that originate from an ancestor domain.
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Using_Dashboards.html
NEW QUESTION 64
What is the result of specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?
- A. The system repeatedly generates warnings.
- B. Matching traffic is not rate limited.
- C. The system rate-limits all traffic.
- D. The rate-limiting rule is disabled.
Answer: B
NEW QUESTION 65
A network engineer is extending a user segment through an FTD device for traffic inspection without creating another IP subnet How is this accomplished on an FTD device in routed mode?
- A. by leveraging the ARP to direct traffic through the firewall
- B. by assigning an inline set interface
- C. by bypassing protocol inspection by leveraging pre-filter rules
- D. by using a BVI and create a BVI IP address in the same subnet as the user segment
Answer: B
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/transparent_or_routed_firewall_mode_for_firepower_threat_defense.html
NEW QUESTION 66
A network administrator reviews the file report for the last month and notices that all file types, except exe. show a disposition of unknown. What is the cause of this issue?
- A. The Cisco FMC cannot reach the Internet to analyze files.
- B. A file policy has not been applied to the access policy.
- C. Only Spero file analysis is enabled.
- D. The malware license has not been applied to the Cisco FTD.
Answer: D
NEW QUESTION 67
The event dashboard within the Cisco FMC has been inundated with low priority intrusion drop events, which are overshadowing high priority events. An engineer has been tasked with reviewing the policies and reducing the low priority events. Which action should be configured to accomplish this task?
- A. generate events
- B. drop and generate
- C. drop packet
- D. drop connection
Answer: C
Explanation:
Explanation
Reference"
https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/worki
NEW QUESTION 68
In which two ways do access control policies operate on a Cisco Firepower system? (Choose two.)
- A. Traffic inspection can be interrupted temporarily when configuration changes are deployed.
- B. The system performs intrusion inspection followed by file inspection.
- C. They can block traffic based on Security Intelligence data.
- D. File policies use an associated variable set to perform intrusion prevention.
- E. The system performs a preliminary inspection on trusted traffic to validate that it matches the trusted parameters.
Answer: A,C
NEW QUESTION 69
Which license type is required on Cisco ISE to integrate with Cisco FMC pxGrid?
- A. plus
- B. apex
- C. base
- D. mobility
Answer: A
NEW QUESTION 70
An engineer is setting up a new Firepower deployment and is looking at the default FMC policies to start the implementation During the initial trial phase, the organization wants to test some common Snort rules while still allowing the majority of network traffic to pass Which default policy should be used?
- A. Balanced Security and Connectivity
- B. Security Over Connectivity
- C. Maximum Detection
- D. Connectivity Over Security
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/623/fdm/fptd-fdm-config-guide-623/fptd-fdm-intrusion.html
NEW QUESTION 71
Which CLI command is used to control special handling of ClientHello messages?
- A. system support ssl-client-hello-display
- B. system support ssl-client-hello-enabled
- C. system support ssl-client-hello-tuning
- D. system support ssl-client-hello-force-reset
Answer: B
Explanation:
Explanation
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/firepower_command_line_reference.html
NEW QUESTION 72
Refer to the exhibit.
And engineer is analyzing the Attacks Risk Report and finds that there are over 300 instances of new operating systems being seen on the network How is the Firepower configuration updated to protect these new operating systems?
- A. The administrator requests a Remediation Recommendation Report from Cisco Firepower
- B. Cisco Firepower automatically updates the policies.
- C. Cisco Firepower gives recommendations to update the policies.
- D. The administrator manually updates the policies.
Answer: C
Explanation:
Explanation
Ref:
https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Tailori
NEW QUESTION 73
Which command-line mode is supported from the Cisco Firepower Management Center CLI?
- A. privileged
- B. configuration
- C. admin
- D. user
Answer: B
NEW QUESTION 74
Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)
- A. The units must be different models if they are part of the same series.
- B. The units must be the same version
- C. Both devices can be part of a different group that must be in the same domain when configured within the FMC.
- D. The units must be configured only for firewall routed mode.
- E. The units must be the same model.
Answer: B,E
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/212699- configure-ftd-high-availability-on-firep.html
NEW QUESTION 75
After deploying a network-monitoring tool to manage and monitor networking devices in your organization, you realize that you need to manually upload an MIB for the Cisco FMC. In which folder should you upload the MIB file?
- A. /sf/etc/DCEALERT.MIB
- B. /etc/sf/DCEALERT.MIB
- C. /etc/sf/DCMIB.ALERT
- D. system/etc/DCEALERT.MIB
Answer: B
NEW QUESTION 76
Which report template field format is available in Cisco FMC?
- A. box lever chart
- B. bar chart
- C. benchmark chart
- D. arrow chart
Answer: B
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Working_with_Reports.html
NEW QUESTION 77
How many report templates does the Cisco Firepower Management Center support?
- A. 0
- B. unlimited
- C. 1
- D. 2
Answer: B
NEW QUESTION 78
......
Verified 300-710 dumps Q&As - 100% Pass from Exams4sures: https://www.exams4sures.com/Cisco/300-710-practice-exam-dumps.html
Pass 300-710 Exam in First Attempt Guaranteed 2022 Dumps: https://drive.google.com/open?id=1f3cVlQkFCFYXAJmPfWAeL7bf10ms9wpa