Pass 300-710 SNCF in Just 3 Days – Stress-Free!
Get your 300-710 Securing Networks with Cisco Firepower certification with 100% pass guarantee. Pay only after passing!
Click here to secure your guaranteed certification now!
Have questions? Contact us directly on WhatsApp for quick support!
Question 141
An administrator is optimizing the Cisco FTD rules to improve network performance, and wants to bypass inspection for certain traffic types to reduce the load on the Cisco FTD. Which policy must be configured to accomplish this goal?
- A. Intrusion
- B. Prefilter
- C. URL Filtering
- D. Identity
Correct Answer: B
Question 142
A Cisco FTD has two physical interfaces assigned to a BVI. Each interface is connected to a different VLAN on the same switch. Which firewall mode is the Cisco FTD set up to support?
- A. High availability clustering
- B. Active/Active failover
- C. Transparent
- D. Routed
Correct Answer: C
Question 143
An organization is migrating their Cisco ASA devices running in multicontext mode to Cisco FTD devices. Which action must be taken to ensure that each context on the Cisco ASA is logically separated in the Cisco FTD devices?
- A. Configure a container instance in the Cisco FTD for each context in the Cisco ASA.
- B. Add the Cisco FTD device to the Cisco ASA port channels.
- C. Configure the Cisco FTD to use port channels spanning multiple networks.
- D. Add a native instance to distribute traffic to each Cisco FTD context.
Correct Answer: A
Question 144
An engineer wants to change an existing transparent Cisco FTD to routed mode. The device controls traffic between two network segments. Which action is mandatory to allow hosts to reestablish communication between these two segments after the change?
- A. Remove the existing dynamic routing protocol settings.
- B. Configure multiple BVIs to route between segments.
- C. Assign unique VLAN IDs to each firewall interface.
- D. Implement non-overlapping IP subnets on each segment.
Correct Answer: D
Question 145
An engineer installs a Cisco FTD device and wants to inspect traffic within the same subnet passing through a firewall and inspect traffic destined to the Internet. Which configuration will meet this requirement?
- A. Transparent firewall mode with IRB only
- B. Routed firewall mode with BVI and routed interfaces
- C. Transparent firewall mode with multiple BVIs
- D. Routed firewall mode with routed interfaces only
Correct Answer: C
Question 146
A network administrator is deploying a Cisco IPS appliance and needs it to operate initially without affecting traffic flows. It must also collect data to provide a baseline of unwanted traffic before being reconfigured to drop it. Which Cisco IPS mode meets these requirements?
- A. Failsafe
- B. Inline tap
- C. Promiscuous
- D. Bypass
Correct Answer: B
Question 147
A network administrator is implementing an active/passive high availability Cisco FTD pair. When adding the high availability pair, the administrator cannot select the secondary peer. What is the cause?
- A. The second Cisco FTD is not the same model as the primary Cisco FTD.
- B. An high availability license must be added to the Cisco FMC before adding the high availability pair.
- C. The failover link must be defined on each Cisco FTD before adding the high availability pair.
- D. Both Cisco FTD devices are not at the same software version.
Correct Answer: D
Question 148
An administrator is configuring their transparent Cisco FTD device to receive ERSPAN traffic from multiple switches on a passive port, but the Cisco FTD is not processing the traffic. What is the problem?
- A. The switches do not have Layer 3 connectivity to the FTD device for GRE traffic transmission.
- B. The switches were not set up with a monitor session ID that matches the flow ID defined on the Cisco FTD.
- C. The Cisco FTD must be in routed mode to process ERSPAN traffic.
- D. The Cisco FTD must be configured with an ERSPAN port not a passive port.
Correct Answer: C
Question 149
What is an advantage of adding multiple inline interface pairs to the same inline interface set when deploying an asynchronous routing configuration?
- A. Allows the IPS to identify inbound and outbound traffic as part of the same traffic flow.
- B. The interfaces disable autonegotiation and interface speed is hard coded set to 1000 Mbps.
- C. Allows traffic inspection to continue without interruption during the Snort process restart.
- D. The interfaces are automatically configured as a media-independent interface crossover.
Correct Answer: C
Question 150
A network administrator cannot select the link to be used for failover when configuring an active/passive HA Cisco FTD pair. Which configuration must be changed before setting up the high availability pair?
- A. An IP address in the same subnet must be added to each Cisco FTD on the interface.
- B. The interface name must be removed from the interface on each Cisco FTD.
- C. The name Failover must be configured manually on the interface on each Cisco FTD.
- D. The interface must be configured as part of a LACP Active/Active EtherChannel.
Correct Answer: B