Pass 300-710 SNCF in Just 3 Days – Stress-Free!
Get your 300-710 Securing Networks with Cisco Firepower certification with 100% pass guarantee. Pay only after passing!
Click here to secure your guaranteed certification now!
Have questions? Contact us directly on WhatsApp for quick support!
Question 21
An engineer is configuring a second Cisco FMC as a standby device but is unable to register with the active unit. What is causing this issue?
- A. The code versions running on the Cisco FMC devices are different.
- B. The licensing purchased does not include high availability.
- C. The primary FMC currently has devices connected to it.
- D. There is only 10 Mbps of bandwidth between the two devices.
Correct Answer: A
Question 22
While configuring FTD, a network engineer wants to ensure that traffic passing through the appliance does not require routing or VLAN rewriting. Which interface mode should the engineer implement to accomplish this task?
- A. Inline set
- B. Passive
- C. Transparent
- D. Inline tap
Correct Answer: C
Question 23
A mid-sized company is experiencing higher network bandwidth utilization due to a recent acquisition. The network operations team is asked to scale up their one Cisco FTD appliance deployment to higher capacities due to the increased network bandwidth. Which design option should be used to accomplish this goal?
- A. Deploy multiple Cisco FTD HA pairs in clustering mode to increase performance.
- B. Deploy multiple Cisco FTD appliances in firewall clustering mode to increase performance.
- C. Deploy multiple Cisco FTD appliances using VPN load-balancing to scale performance.
- D. Deploy multiple Cisco FTD HA pairs to increase performance.
Correct Answer: B
Question 24
In a multi-tenant deployment where multiple domains are in use, which update should be applied outside of the Global Domain?
- A. Minor upgrade
- B. Local import of intrusion rules
- C. Cisco Geolocation Database
- D. Local import of major upgrade
Correct Answer: B
Question 25
An organization has a compliance requirement to protect servers from clients, however, the clients and servers all reside on the same Layer 3 network. Without readdressing IP subnets for clients or servers, how is segmentation achieved?
- A. Change the IP addresses of the servers, while remaining on the same subnet.
- B. Deploy a firewall in routed mode between the clients and servers.
- C. Change the IP addresses of the clients, while remaining on the same subnet.
- D. Deploy a firewall in transparent mode between the clients and servers.
Correct Answer: D
Question 26
Network traffic coming from an organization’s CEO must never be denied. Which access control policy configuration option should be used if the deployment engineer is not permitted to create a rule to allow all traffic?
- A. Change the intrusion policy from security to balance.
- B. Configure a trust policy for the CEO.
- C. Configure firewall bypass.
- D. Create a NAT policy just for the CEO.
Correct Answer: B
Question 27
What is a characteristic of bridge groups on a Cisco FTD?
- A. In routed firewall mode, routing between bridge groups is supported.
- B. Routing between bridge groups is achieved only with a router-on-a-stick configuration on a connected router.
- C. In routed firewall mode, routing between bridge groups must pass through a routed interface.
- D. In transparent firewall mode, routing between bridge groups is supported.
Correct Answer: C
Question 28
A Cisco FTD device is running in transparent firewall mode with a VTEP bridge group member ingress interface. What must be considered by an engineer tasked with specifying a destination MAC address for a packet trace?
- A. The output format option for the packet logs is unavailable.
- B. Only the UDP packet type is supported.
- C. The destination MAC address is optional if a VLAN ID value is entered.
- D. The VLAN ID and destination MAC address are optional.
Correct Answer: C
Question 29
With Cisco FTD software, which interface mode must be configured to passively receive traffic that passes through the appliance?
- A. ERSPAN
- B. Firewall
- C. TAP
- D. IPS-only
Correct Answer: C
Question 30
An engineer is monitoring network traffic from their sales and product development departments, which are on two separate networks. What must be configured in order to maintain data privacy for both departments?
- A. Use 802.1Q
- B. Use passive IDS ports for both departments.
- C. Use a dedicated IPS inline set for each department to maintain traffic separation.
- D. Use one pair of inline set in TAP mode for both departments.
Correct Answer: C