Pass 300-710 SNCF in Just 3 Days – Stress-Free!
Get your 300-710 Securing Networks with Cisco Firepower certification with 100% pass guarantee. Pay only after passing!
Click here to secure your guaranteed certification now!
Have questions? Contact us directly on WhatsApp for quick support!
Question 241
When using Cisco Threat Response, which phase of the Intelligence Cycle publishes the results of the investigation?
- A. Processing
- B. Direction
- C. Dissemination
- D. Analysis
Correct Answer: C
Question 242
A security engineer is adding three Cisco FTD devices to a Cisco FMC. Two of the devices have successfully registered to the Cisco FMC. The device that is unable to register is located behind a router that translates all outbound traffic to the router’s WAN IP address. Which two steps are required for this device to register to the Cisco FMC? (Choose two.)
- A. Reconfigure the Cisco FMC to use the device’s private IP address instead of the WAN address.
- B. Configure a NAT ID on both the Cisco FMC and the device.
- C. Reconfigure the Cisco FMC to use the device’s hostname instead of IP address.
- D. Remove the IP address defined for the device in the Cisco FMC.
- E. Add the port number being used for PAT on the router to the device’s IP address in the Cisco FMC.
Correct Answer: B, D
Question 243
An engineer is setting up a remote access VPN on a Cisco FTD device and wants to define which traffic gets sent over the VPN tunnel. Which named object type in Cisco FMC must be used to accomplish this task?
- A. Crypto map
- B. Split tunnel
- C. Access list
- D. Route map
Correct Answer: C
Question 244
An engineer needs to configure remote storage on Cisco FMC. Configuration backups must be available from a secure location on the network for disaster recovery. Reports need to back up to a shared location that auditors can access with their Active Directory logins. Which strategy must the engineer use to meet these objectives?
- A. Use NFS for both backups and reports.
- B. Use SSH for backups and NFS for reports.
- C. Use SMB for backups and NFS for reports.
- D. Use SMB for both backups and reports.
Correct Answer: D
Question 245
An engineer is configuring two new Cisco FTD devices to replace the existing high availability firewall pair in a highly secure environment. The information exchanged between the FTD devices over the failover link must be encrypted. Which protocol supports this on the Cisco FTD?
- A. MACsec
- B. IPsec
- C. SSH
- D. SSL
Correct Answer: B
Question 246
DRAG DROP: A network engineer is deploying a Cisco Firepower 4100 appliance and must configure a multi-instance environment for high availability. Drag and drop the actions from the left into sequence on the right for this configuration.
Correct Answer: [Sequence actions here]
Question 247
A security engineer must configure policies for a recently deployed Cisco FTD. The security policy for the company dictates that when five or more connections from external sources are initiated within 2 minutes, there is cause for concern. Which type of policy must be configured in Cisco FMC to generate an alert when this condition is triggered?
- A. Application detector
- B. Access control
- C. Correlation
- D. Intrusion
Correct Answer: C
Question 248
A network administrator is reviewing a weekly scheduled attacks risk report and notices a host that flagged for an Impact 2 attack. Where should the administrator look within Cisco FMC to find out more relevant information about this host and attack?
- A. Analysis > Lookup > Whois
- B. Analysis > Correlation > Correlation Events
- C. Analysis > Hosts > Vulnerabilities
- D. Analysis > Hosts > Host Attributes
Correct Answer: D
Question 249
A consultant is working on a project where the customer is upgrading from a single Cisco Firepower 2130 managed by FDM to a pair of Cisco Firepower 2130s managed by FMC for high availability. The customer wants the configuration of the existing device being managed by FDM to be carried over to FMC and then replicated to the additional device being added to create the high availability pair. Which action must the consultant take to meet this requirement?
- A. The current FDM configuration must be configured by hand into FMC before the devices are registered.
- B. The current FDM configuration must be migrated to FMC using the Secure Firewall Migration Tool.
- C. The FTD configuration must be converted to ASA command format, which can then be migrated to FMC.
- D. The current FDM configuration will be converted automatically into FMC when the device registers.
Correct Answer: B
Question 250
A network administrator must create an EtherChannel interface on a new Cisco Firepower 9300 appliance registered with an FMC for high availability. Where must the administrator create the EtherChannel interface?
- A. FMC GUI
- B. FMC CLI
- C. FTD CLI
- D. FXOS CLI
Correct Answer: D