Pass 300-710 SNCF in Just 3 Days – Stress-Free!
Get your 300-710 Securing Networks with Cisco Firepower certification with 100% pass guarantee. Pay only after passing!
Click here to secure your guaranteed certification now!
Have questions? Contact us directly on WhatsApp for quick support!
Question 311
An engineer must integrate a third-party security intelligence feed with Cisco Secure Firewall Management Center. Secure Firewall Management Center is running Version 6.2.3 and has 8 GB of memory. Which two actions must be taken to implement Threat Intelligence Director? (Choose two.)
- A. Add a TAXI server.
- B. Add the URL of the TAXII server.
- C. Upgrade to version 6.6.
- D. Enable REST API access.
- E. Add 7 GB of memory.
Correct Answer: D, E
Question 312
A network administrator is trying to configure Active Directory authentication for VPN authentication to a Cisco Secure Firewall Threat Defense instance that is registered with Cisco Secure Firewall Management Center. Which system settings must be configured first in Secure Firewall Management Center to accomplish the goal?
- A. Authentication, Device
- B. Policies, Authentication
- C. System, Realms
- D. Device, Remote Access VPN
Correct Answer: C
Question 313
Which component is needed to perform rapid threat containment with Cisco FMC?
- A. DDI
- B. SIEM
- C. ISE
- D. RESTful API
Correct Answer: C
Question 314
An administrator is attempting to add a new Cisco Secure Firewall Threat Defense device to Cisco Secure Firewall Management Center with a password of Cisco0481488187 481488187. The private IP address of the FMC server is 192.168.75.201. Which command must be used in order to accomplish this task?
- A. configure manager add 192.168.75.201 255.255.255.0
- B. configure manager add 192.168.75.201
- C. configure manager add 192.168.45.45
- D. configure manager add 192.168.75.201/24
Correct Answer: B
Question 315
Which component simplifies incident investigation with Cisco Threat Response?
- A. Cisco Secure Firewall appliance
- B. Cisco AMP client
- C. local CVE database
- D. browser plug-in
Correct Answer: D
Question 316
An engineer must change the mode of a Cisco Secure Firewall Threat Defense (FTD) firewall in the Cisco Secure Firewall Management Center (FMC) inventory. The engineer must take these actions:
- Register Secure FTD with Secure FMC.
- Change the firewall mode.
- Deregister the Secure FTD device from Secure FMC.
How must the engineer take the actions?
- A. Access the Secure FTD CLI from the console port.
- B. Configure the management IP address.
- C. Reload the Secure FTD device.
- D. Erase the Secure FTD configuration.
Correct Answer: D
Question 317
Which action must be taken to permit communication between a bridge group and routed interface on Cisco Secure Firewall?
- A. Define a source NAT address.
- B. Create an access rule to allow the traffic.
- C. Enable split tunneling.
- D. Create an ACL for the bridge group.
Correct Answer: B
Question 318
An engineer is implementing a new Cisco Secure Firewall. The firewall must filter traffic between the three subnets:
- LAN 192.168.101.0/24
- DMZ 192.168.200.0/24
- WAN 10.0.0.0/30
Which firewall mode must the engineer implement?
- A. network
- B. routed
- C. gateway
- D. transparent
Correct Answer: B
Question 319
An administrator configures the interfaces of a Cisco Secure Firewall Threat Defense device in an inline IPS deployment. The administrator completes these actions:
- identifies the device and the interfaces
- sets the interface mode to inline
- enables the interfaces
Which configuration step must the administrator take next to complete the implementation?
- A. Set the interface to routed mode.
- B. Enable spanning-tree PortFast on the interfaces.
- C. Configure an inline set.
- D. Set the interface to transparent mode.
Correct Answer: C
Question 320
An engineer must replace a Cisco Secure Firewall high-availability device due to a failure. When the replacement device arrives, the engineer must separate the high-availability pair from Cisco Secure Firewall Management Center. Which action must the engineer take first to restore high availability?
- A. Force a break between the devices.
- B. Register the secondary device.
- C. Unregister the secondary device.
- D. Configure NTP time synchronization.
Correct Answer: A