Cisco 300-710 Securing Networks with Cisco Firepower (SNCF) Exam Free Dumps | 100% Free, Complete

Question 131

What is a feature of Cisco AMP private cloud?

• A. It disables direct connections to the public cloud.
• B. It supports security intelligence filtering.
• C. It supports anonymized retrieval of threat intelligence.
• D. It performs dynamic analysis.

Correct Answer: A

Question 132

Which feature within the Cisco FMC web interface allows for detecting, analyzing, and blocking malware in network traffic?

• A. Intrusion and file events
• B. Cisco AMP for Networks
• C. File policies
• D. Cisco AMP for Endpoints

Correct Answer: B

Question 133

A network administrator discovers that a user connected to a file server and downloaded a malware file. The Cisco FMC generated an alert for the malware event, however, the user still remained connected. Which Cisco AMP file rule action within the Cisco FMC must be set to resolve this issue?

• A. Malware Cloud Lookup
• B. Reset Connection
• C. Detect Files
• D. Local Malware Analysis

Correct Answer: B

Question 134

An engineer has been tasked with using Cisco FMC to determine if files being sent through the network are malware. Which two configuration tasks must be performed to achieve this file lookup? (Choose two.)

• A. The Cisco FMC needs to include an SSL decryption policy.
• B. The Cisco FMC needs to connect to the Cisco AMP for Endpoints service.
• C. The Cisco FMC needs to connect to the Cisco ThreatGrid service directly for sandboxing.
• D. The Cisco FMC needs to connect with the FireAMP Cloud.
• E. The Cisco FMC needs to include a file inspection policy for malware lookup.

Correct Answer: D, E

Question 135

A network engineer wants to add a third-party threat feed into the Cisco FMC for enhanced threat detection. Which action should be taken to accomplish this goal?

• A. Enable Rapid Threat Containment using REST APIs.
• B. Enable Rapid Threat Containment using STIX and TAXII.
• C. Enable Threat Intelligence Director using REST APIs.
• D. Enable Threat Intelligence Director using STIX and TAXII.

Correct Answer: D

Reference

Question 136

A network engineer is logged into the Cisco AMP for Endpoints console and sees a malicious verdict for an identified SHA-256 hash. Which configuration is needed to mitigate this threat?

• A. Add the hash to the simple custom detection list
• B. Use regular expressions to block the malicious file
• C. Enable a personal firewall in the infected endpoint
• D. Add the hash from the infected endpoint to the network block list

Correct Answer: A

Question 137

A network administrator is concerned about the high number of malware files affecting users’ machines. What must be done within the access control policy in Cisco FMC to address this concern?

• A. Create an intrusion policy and set the access control policy to block
• B. Create an intrusion policy and set the access control policy to allow
• C. Create a file policy and set the access control policy to allow
• D. Create a file policy and set the access control policy to block

Correct Answer: D

Question 138

Within an organization’s high availability environment where both firewalls are passing traffic, traffic must be segmented based on which department it is destined for. Each department is situated on a different LAN. What must be configured to meet these requirements?

• A. Redundant interfaces
• B. Span EtherChannel clustering
• C. High availability active/standby firewalls
• D. Multi-instance firewalls

Correct Answer: D

Question 139

An engineer is configuring a Cisco IPS to protect the network and wants to test a policy before deploying it. A copy of each incoming packet needs to be monitored while traffic flow remains constant. Which IPS mode should be implemented to meet these requirements?

• A. Routed
• B. Passive
• C. Transparent
• D. Inline tap

Correct Answer: D

Question 140

A network security engineer must replace a faulty Cisco FTD device in a high availability pair. Which action must be taken while replacing the faulty unit?

• A. Ensure that the faulty Cisco FTD device remains registered to the Cisco FMC
• B. Shut down the active Cisco FTD device before powering up the replacement unit
• C. Shut down the Cisco FMC before powering up the replacement unit
• D. Unregister the faulty Cisco FTD device from the Cisco FMC

Correct Answer: D