Pass 300-710 SNCF in Just 3 Days – Stress-Free!
Get your 300-710 Securing Networks with Cisco Firepower certification with 100% pass guarantee. Pay only after passing!
Click here to secure your guaranteed certification now!
Have questions? Contact us directly on WhatsApp for quick support!
Question 251
A network administrator is reviewing a monthly advanced malware risk report and notices a host that is listed as CnC Connected. Where must the administrator look within Cisco FMC to further determine if this host is infected with malware?
- A. Analysis > Hosts > Indications of Compromise
- B. Analysis > Hosts > Host Attributes
- C. Analysis > Files > Malware Events
- D. Analysis > Files > Network File Trajectory
Correct Answer: D
Question 252
An engineer is configuring a Cisco FTD device to place on the Finance VLAN to provide additional protection for company financial data. The device must be deployed without requiring any changes on the end user workstations, which currently use DHCP to obtain an IP address. How must the engineer deploy the device to meet this requirement?
- A. Deploy the device in transparent mode and enable the DHCP Server feature.
- B. Deploy the device in routed mode and enable the DHCP Relay feature.
- C. Deploy the device in transparent mode and allow DHCP traffic in the access control policies.
- D. Deploy the device in routed mode and allow DHCP traffic in the access control policies.
Correct Answer: C
Question 253
Which default action setting in a Cisco FTD Access Control Policy allows all traffic from an undefined application to pass without Snort inspection?
- A. Network Discovery Only
- B. Inherit from Base Policy
- C. Intrusion Prevention
- D. Trust All Traffic
Correct Answer: D
Question 254
An engineer plans to reconfigure an existing Cisco FTD from transparent mode to routed mode. Which additional action must be taken to maintain communication between the two network segments?
- A. Assign a unique VLAN ID for the interface in each segment.
- B. Update the IP addressing so that each segment is a unique IP subnet.
- C. Configure a NAT rule so that traffic between the segments is exempt from NAT.
- D. Deploy inbound ACLs on each interface to allow traffic between the segments.
Correct Answer: B
Question 255
Network users are experiencing intermittent issues with internet access. An engineer identified that the issue is being caused by NAT exhaustion. How must the engineer change the dynamic NAT configuration to provide internet access for more users without running out of resources?
- A. Convert the dynamic auto NAT rule to dynamic manual NAT.
- B. Add an identity NAT rule to handle the overflow of users.
- C. Configure fallthrough to interface PAT on the Advanced tab.
- D. Define an additional static NAT for the network object in use.
Correct Answer: C
Question 256
An engineer is configuring a custom intrusion rule on Cisco FMC. The engineer needs the rule to search the payload or stream for the string “|44 78 97 13 2 0A|”. Which keyword must the engineer use with this string to create an argument for packet inspection?
- A. protected_content
- B. content
- C. data
- D. metadata
Correct Answer: B
Question 257
An engineer must investigate a connectivity issue from an endpoint behind a Cisco FTD device and a public DNS server. The endpoint cannot perform name resolution queries. Which action must the engineer perform to troubleshoot the issue by simulating real DNS traffic on the Cisco FTD while verifying the Snort verdict?
- A. Use the Capture w/Trace wizard in Cisco FMC.
- B. Run the system support firewall-engine-debug command from the FTD CLI.
- C. Create a Custom Workflow in Cisco FMC.
- D. Perform a Snort engine capture using tcpdump from the FTD CLI.
Correct Answer: D
Question 258
When an engineer captures traffic on a Cisco Secure Firewall Threat Defense device to troubleshoot a connectivity problem, they receive a large amount of output data in the GUI tool. The engineer found that viewing the captures this way is time-consuming and difficult to sort and filter. Which file type must the engineer export the data in so that it can be reviewed using a tool built for this type of analysis?
- A. NetFlow v9
- B. PCAP
- C. IPFIX
- D. NetFlow v5
Correct Answer: B
Question 259
An engineer is configuring a custom application detector for HTTP traffic and wants to import a file that was provided by a third party. Which type of files are advanced application detectors created and uploaded as?
- A. Perl script
- B. NBAR protocol
- C. LUA script
- D. Python program
Correct Answer: C
Question 260
An engineer must deploy a Cisco Secure Firewall Threat Defense device. Management wants to examine traffic without requiring network changes that will disrupt end users. Corporate security policy requires the separation of management traffic from data traffic and the use of SSH over Telnet for remote administration. How must the device be deployed to meet these requirements?
- A. Transparent mode with a management interface
- B. Routed mode with a bridge virtual interface
- C. Transparent mode with a data interface
- D. Routed mode with a diagnostic interface
Correct Answer: D