Pass 300-710 SNCF in Just 3 Days – Stress-Free!
Get your 300-710 Securing Networks with Cisco Firepower certification with 100% pass guarantee. Pay only after passing!
Click here to secure your guaranteed certification now!
Have questions? Contact us directly on WhatsApp for quick support!
Question 221
A network administrator registered a new FTD to an existing FMC. The administrator cannot place the FTD in transparent mode. Which action enables transparent mode?
- A. Deregister the FTD device from FMC and configure transparent mode via the CLI.
- B. Obtain an FTD model that supports transparent mode.
- C. Add a Bridge Group Interface to the FTD before transparent mode is configured.
- D. Assign an IP address to two physical interfaces.
Correct Answer: A
Question 222
A network engineer must provide redundancy between two Cisco FTD devices. The redundancy configuration must include automatic configuration, translation, and connection updates. After the initial configuration of the two appliances, which two steps must be taken to proceed with the redundancy configuration? (Choose two.)
- A. Configure the virtual MAC address on the failover link.
- B. Configure the failover link with stateful properties.
- C. Disable hellos on the inside interface.
- D. Ensure the high availability license is enabled.
- E. Configure the standby IP addresses.
Correct Answer: B, E
Question 223
An administrator is attempting to add a new FTD device to their FMC behind a NAT device with a NAT ID of NAT001 and a password of Cisco0123456789. The private IP address of the FMC server is 192.168.45.45, which is being translated to the public IP address of 209.165.200.225/27. Which command set must be used in order to accomplish this task?
- A. configure manager add 209.165.200.225 255.255.255.224
- B. configure manager add 209.165.200.225
- C. configure manager add 209.165.200.225/27
- D. configure manager add 192.168.45.45
Correct Answer: B
Question 224
An engineer attempts to pull the configuration for a Cisco FTD sensor to review with Cisco TAC but does not have direct access to the CLI for the device. The CLI for the device is managed by Cisco FMC to which the engineer has access. Which action in Cisco FMC grants access to the CLI for the device?
- A. Create a backup of the configuration within the Cisco FMC.
- B. Download the configuration file within the File Download section of Cisco FMC.
- C. Export the configuration using the Import/Export tool within Cisco FMC.
- D. Use the show run all command in the Cisco FTD CLI feature within Cisco FMC.
Correct Answer: D
Question 225
An engineer must add DNS-specific rules to the Cisco FTD intrusion policy. The engineer wants to use the rules currently in the Cisco FTD Snort database that are not already enabled but does not want to enable more than are needed. Which action meets these requirements?
- A. Change the rules using the Generate and Use Recommendations feature.
- B. Change the rule state within the policy being used.
- C. Change the dynamic state of the rule within the policy.
- D. Change the base policy to Security over Connectivity.
Correct Answer: B
Question 226
A security engineer must deploy a Cisco FTD appliance as a bump in the wire to detect intrusion events without disrupting the flow of network traffic. Which two features must be configured to accomplish the task? (Choose two.)
- A. Transparent mode
- B. Tap mode
- C. Bridged mode
- D. Inline set pair
- E. Passive interfaces
Correct Answer: B, D
Question 227
A network administrator has converted a Cisco FTD from using LDAP to LDAPS for VPN authentication. The Cisco FMC can connect to the LDAPS server, but the Cisco FTD is not connecting. Which configuration must be enabled on the Cisco FTD?
- A. The LDAPS must be allowed through the access control policy.
- B. The RADIUS server must be defined.
- C. SSL must be set to use TLSv1.2 or lower.
- D. DNS servers must be defined for name resolution.
Correct Answer: D
Question 228
A security engineer is deploying a pair of primary and secondary Cisco FMC devices. The secondary must also receive updates from Cisco Talos. Which action achieves this goal?
- A. Manually import rule updates onto the secondary Cisco FMC device.
- B. Force failover for the secondary Cisco FMC to synchronize the rule updates from the primary.
- C. Configure the primary Cisco FMC so that the rules are updated.
- D. Configure the secondary Cisco FMC so that it receives updates from Cisco Talos.
Correct Answer: C
Question 229
A security engineer must configure a Cisco FTD appliance to inspect traffic coming from the internet. The internet traffic will be mirrored from the Cisco Catalyst 9300 Switch. Which configuration accomplishes the task?
- A. Set the firewall mode to routed.
- B. Set interface configuration mode to passive.
- C. Set the firewall mode to transparent.
- D. Set interface configuration mode to none.
Correct Answer: B
Question 230
Refer to the exhibit. An engineer is analyzing a Network Risk Report from Cisco FMC. Which application must the engineer take immediate action against to prevent unauthorized network use?
- A. YouTube
- B. TOR
- C. Chrome
- D. Kerberos
Correct Answer: B