Pass 300-710 SNCF in Just 3 Days – Stress-Free!
Get your 300-710 Securing Networks with Cisco Firepower certification with 100% pass guarantee. Pay only after passing!
Click here to secure your guaranteed certification now!
Have questions? Contact us directly on WhatsApp for quick support!
Question 271
Encrypted Visibility Engine (EVE) is enabled under which tab on an access control policy in Cisco Secure Firewall Management Center?
- A. Network Analysis Policy
- B. SSL
- C. Advanced
- D. Security Intelligence
Correct Answer: C
Question 272
An engineer is configuring a Cisco Secure Firewall Threat Defense device managed by Cisco Secure Firewall Management Center. The device must have SSH enabled and be accessible from the inside interface for remote administration. Which type of policy must the engineer configure to accomplish this?
- A. Platform settings
- B. Access control
- C. Prefilter
- D. Identity
Correct Answer: B
Question 273
What is the result when two users modify a VPN policy at the same time on a Cisco Secure Firewall Management Center managed device?
- A. Both users can edit the policy and the last saved configuration persists.
- B. The changes from both users will be merged together into the policy.
- C. The first user locks the configuration when selecting edit on the policy.
- D. The system prevents modifications to the policy by multiple users.
Correct Answer: A
Question 274
A network administrator is configuring a BVI interface on a routed FTD. The administrator wants to isolate traffic on the interfaces connected to the bridge group and not have the FTD route this traffic using the routing table. What must be configured?
- A. A new VRF must be created for the BVI interface.
- B. An IP address must be configured on the BVI.
- C. IP routing must be removed from the physical interfaces connected to the BVI.
- D. The BVI interface must be configured for transparent mode.
Correct Answer: C
Question 275
Which file format can standard reports from Cisco Secure Firewall Management Center be downloaded in?
- A. doc
- B. ppt
- C. osv
- D. xls
Correct Answer: C
Question 276
Remote users who connect via Cisco Secure Client to the corporate network behind a Cisco Secure Firewall Threat Defense device are reporting no audio on calls when calling between remote users using their softphones. These same users can call internal users on the corporate network without any issues. What is the cause of this issue?
- A. The hairpinning feature is not available on Cisco Secure Firewall Threat Defense.
- B. Cisco Secure Firewall Threat Defense needs a NAT policy that allows outside to outside communication.
- C. The Enable Spoke to Spoke Connectivity through Hub option is not selected on Cisco Secure Firewall Threat Defense.
- D. Split tunneling is enabled for the Remote Access VPN on Cisco Secure Firewall Threat Defense.
Correct Answer: B
Question 277
An administrator is configuring the interface of a Cisco Secure Firewall Threat Defense firewall device in a passive IPS deployment. The device and interface have been identified. Which set of configuration steps must the administrator perform next to complete the implementation?
- A. Set the interface mode to passive. Associate the interface with a security zone. Enable the interface. Set the MTU parameter.
- B. Modify the interface to retransmit received traffic. Associate the interface with a security zone. Set the MTU parameter.
- C. Set the interface mode to passive. Associate the interface with a security zone. Set the MTU parameter. Reset the interface.
- D. Modify the interface to retransmit received traffic. Associate the interface with a security zone. Enable the interface. Set the MTU parameter.
Correct Answer: C
Question 278
Which two statements are valid regarding the licensing model used on Cisco Secure Firewall Threat Defense Virtual appliances? (Choose two.)
- A. All licenses support a maximum of 250 VPN peers.
- B. All licenses support up to 16 vCPUs.
- C. All licenses require 500G of available storage for the VM.
- D. Licenses can be used on both physical and virtual appliances.
- E. Licenses can be used on any supported cloud platform.
Correct Answer: D, E
Question 279
A company is deploying Cisco Secure Firewall Threat Defense with IPS. What must be implemented in inline mode to pass the traffic without inspection during spikes and ensure that network traffic is kept?
- A. Change the interface mode to Routed.
- B. Select Propagate Link State.
- C. Increase the MTU to 9000.
- D. Set the Snort Failsafe option.
Correct Answer: D
Question 280
A Cisco Secure Firewall Threat Defense device is configured in inline IPS mode to inspect all traffic that passes through the interfaces in the inline set. Which setting in the inline set configuration must be selected to allow traffic to pass through uninterrupted when VDB updates are being applied?
- A. Tap Mode
- B. Strict TCP Enforcement
- C. Propagate Link State
- D. Snort Fail Open
Correct Answer: D