Pass 300-710 SNCF in Just 3 Days – Stress-Free!
Get your 300-710 Securing Networks with Cisco Firepower certification with 100% pass guarantee. Pay only after passing!
Click here to secure your guaranteed certification now!
Have questions? Contact us directly on WhatsApp for quick support!
Question 231
An organization is implementing Cisco FTD using transparent mode in the network. Which rule in the default Access Control Policy ensures that this deployment does not create a loop in the network?
- A. Multicast and broadcast packets are denied by default
- B. STP BPDU packets are allowed by default.
- C. ARP inspection is enabled by default.
- D. ARP packets are allowed by default.
Correct Answer: B
Question 232
When a Cisco FTD device is configured in transparent firewall mode, on which two interface types can an IP address be configured? (Choose two.)
- A. Physical
- B. EtherChannel
- C. Subinterface
- D. BVI
- E. Diagnostic
Correct Answer: D, E
Question 233
A security engineer needs to configure a network discovery policy on a Cisco FMC appliance and prevent excessive network discovery events from overloading the FMC database? Which action must be taken to accomplish this task?
- A. Monitor only the default IPv4 and IPv6 network ranges.
- B. Configure NetFlow exporters for monitored networks.
- C. Change the network discovery method to TCP/SYN.
- D. Exclude load balancers and NAT devices in the policy.
Correct Answer: D
Question 234
An organization is installing a new Cisco FTD appliance in the network. An engineer is tasked with configuring access between two network segments within the same IP subnet. Which step is needed to accomplish this task?
- A. Specify a name for the bridge group.
- B. Assign an IP address to the Bridge Virtual Interface.
- C. Permit BPDU packets to prevent loops.
- D. Add a separate bridge group for each segment.
Correct Answer: B
Question 235
An engineer defines a new rule while configuring an Access Control Policy. After deploying the policy, the rule is not working as expected and the hit counters associated with the rule are showing zero. What is causing this error?
- A. An incorrect application signature was used in the rule.
- B. The wrong source interface for Snort was selected in the rule.
- C. The rule was not enabled after being created.
- D. Logging is not enabled for the rule.
Correct Answer: A
Question 236
An administrator needs to configure Cisco FMC to send a notification email when a data transfer larger than 10 MB is initiated from an internal host outside of standard business hours. Which Cisco FMC feature must be configured to accomplish this task?
- A. File and malware policy
- B. Application detector
- C. Correlation policy
- D. Intrusion policy
Correct Answer: C
Question 237
An engineer is troubleshooting HTTP traffic to a web server using the packet capture tool on Cisco FMC. When reviewing the captures, the engineer notices that there are a lot of packets that are not sourced from or destined to the web server being captured. How can the engineer reduce the strain of capturing packets for irrelevant traffic on the Cisco FTD device?
- A. Use an access-list within the packet capture to permit only HTTP traffic to and from the web server.
- B. Use the host filter in the packet capture to capture traffic to or from a specific host.
- C. Use the —c option to restrict the packet capture to only the first 100 packets.
- D. Redirect the packet capture output to a .pcap file that can be opened with Wireshark.
Correct Answer: B
Question 238
Which process should be checked when troubleshooting registration issues between Cisco FMC and managed devices to verify that secure communication is occurring?
- A. fpcollect
- B. dhclient
- C. sfrmgr
- D. sftunnel
Correct Answer: D
Question 239
A security engineer must integrate an external feed containing STIX/TAXII data with Cisco FMC. Which feature must be enabled on the Cisco FMC to support this connection?
- A. Threat Intelligence Director
- B. Cisco Success Network
- C. Security Intelligence Feeds
- D. Cisco Secure Endpoint Integration
Correct Answer: A
Question 240
A network administrator is configuring a site-to-site IPsec VPN to a router sitting behind a Cisco FTD. The administrator has configured an access policy to allow traffic to this device on UDP 500, 4500, and ESP. VPN traffic is not working. Which action resolves this issue?
- A. Change the access policy to allow all ports.
- B. Enable IPsec Inspection on the access policy.
- C. Set the allow action in the access policy to trust.
- D. Modify the NAT policy to use the interface PAT.
Correct Answer: C