Pass 300-710 SNCF in Just 3 Days – Stress-Free!
Get your 300-710 Securing Networks with Cisco Firepower certification with 100% pass guarantee. Pay only after passing!
Click here to secure your guaranteed certification now!
Have questions? Contact us directly on WhatsApp for quick support!
Question 281
Which two features can be used with Cisco Secure Firewall Threat Defense remote access VPN? (Choose two.)
- A. Enable Duo two-factor authentication using LDAPS
- B. Support for Cisco Secure Firewall 4100 Series in cluster mode
- C. SSL remote access VPN supports port sharing with other Cisco FTD features using SSL port 443
- D. Use of license utilization for zero-touch network deployment
- E. Support for Rapid Threat Containment using RADIUS dynamic authorization
Correct Answer: A, E
Question 282
Which rule action is only available in Snort 3?
- A. Pass
- B. Generate
- C. Alert
- D. Rewrite
Correct Answer: C
Question 283
A company is deploying a Cisco Secure IPS device configured in inline mode with a single Interface set that contains four interface pairs. Which two configurations must be implemented to allow the IPS device to uniquely identify packet flows and prevent the reporting of duplicate traffic and false positives? (Choose two.)
- A. Set the source SPAN ports to tx only on the switches connected to the IPS interfaces
- B. Modify the security zones used by the Cisco Secure IPS device
- C. Change the MTU for the inline set to at least 1518
- D. Reconfigure access rules to drop all but the first occurrence of the packet
- E. Reassign the interface pairs to separate inline sets
Correct Answer: B, E
Question 284
Cisco SecureX is classified as which type of threat detection and response solution?
- A. MDR
- B. EDR
- C. XDR
- D. NDR
Correct Answer: C
Question 285
An administrator configures new threat intelligence sources and must validate that the feeds are being downloaded and that the intelligence is being used within the Cisco Secure Firewall system. Which action accomplishes the task?
- A. Look at the connection security intelligence events
- B. Use the source status indicator to validate the usage
- C. View the threat intelligence observables to see the downloaded data
- D. Look at the access control policy to validate that the intelligence is being used
Correct Answer: B
Question 286
Cisco Security Analytics and Logging SaaS licenses come with how many days of data retention by default?
- A. 60
- B. 90
- C. 120
- D. 365
Correct Answer: B
Question 287
An external vendor is reporting that they are unable to access an ordering website hosted behind a Cisco Secure Firewall Threat Defense device. The administrator of the device wants to verify that the access policy and NAT policy are configured correctly to allow traffic from the public IP of the external vendor to TCP port 443 on the web server. Which two Cisco Secure Firewall Management Center tools must the administrator use to verify which rules the traffic from the external vendor is matching? (Choose two.)
- A. Packet Capture
- B. Generate Troubleshooting File
- C. Threat Defense CLI
- D. File Download
- E. Packet Tracer
Correct Answer: A, E
Question 288
An organization created a custom application that is being flagged by Cisco Secure Endpoint. The application must be exempt from being flagged. What is the process to meet the requirement?
- A. Configure the custom application to use the information-store paths.
- B. Add the custom application to the DFC list and update the policy.
- C. Precalculate the hash value of the custom application and add it to the allowed applications.
- D. Modify the custom detection list to exclude the custom application.
Correct Answer: C
Question 289
An engineer is configuring a new dashboard within Cisco Secure Firewall Management Center and is having trouble implementing a custom widget. When a custom analysis widget is configured, which option is mandatory for the system to display the information?
- A. Table
- B. Title
- C. Filter
- D. Results
Correct Answer: D
Question 290
A network engineer is planning on deploying a Cisco Secure Firewall Threat Defense Virtual appliance in transparent mode. Which two virtual environments support this configuration? (Choose two.)
- A. OSI
- B. AWS
- C. GCP
- D. KVM
- E. ESXi
Correct Answer: D, E