Summer Sale Limited Time 75% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = simple75

Pass the Cisco CCNP Security 300-710 Questions and answers with Dumpstech

Home
Cisco
CCNP Security
300-710
300-710 Questions and Answers

Exam 300-710 Premium Access

View all detail and faqs for the 300-710 exam

Go to Exam

Practice at least 50% of the questions to maximize your chances of passing.

Viewing page 11 out of 12 pages

Viewing questions 101-110 out of questions

Questions # 101:

Upon detecting a flagrant threat on an endpoint, which two technologies instruct Cisco Identity Services Engine to contain the infected endpoint either manually or automatically? (Choose two.)

Options:

Cisco ASA 5500 Series

Cisco FMC

Cisco AMP

Cisco Stealthwatch

Cisco ASR 7200 Series

Answer

C, D

Questions # 102:

Question # 102

A security engineer must improve security in an organization and is producing a risk mitigation strategy to present to management for approval. Which action must the security engineer take based on this Attacks Risk Report?

Options:

Inspect DNS traffic

Block NetBIOS.

Block Internal Explorer

Inspect TCP port 80 traffic

Answer

Explanation

Based on the Attacks Risk Report, DNS is associated with a high number of impact events (16). DNS traffic is critical for network operations but can also be exploited for malicious activities such as DNS tunneling, DDoS attacks, and data exfiltration. To improve security, the security engineer should focus on inspecting DNS traffic. This involves deploying DNS security solutions and monitoring DNS traffic for anomalies to detect and mitigate potential threats.

Steps:

Implement DNS security tools such as DNS filtering, DNSSEC, and DNS anomaly detection.

Configure the firewall to inspect DNS traffic for malicious activities.

Regularly analyze DNS logs to identify and respond to threats.

This action addresses a significant risk identified in the report and helps to mitigate potential attacks exploiting DNS.

[References:Cisco Secure Firewall Management Center Administrator Guide, Chapter on DNS Security and Traffic Inspection., , , ]

Questions # 103:

Refer to the exhibit.

Question # 103

An administrator is looking at some of the reporting capabilities for Cisco Firepower and noticed this section of the Network Risk report showing a lot of SSL activity that cloud be used for evasion. Which action will mitigate this risk?

Options:

Use SSL decryption to analyze the packets.

Use encrypted traffic analytics to detect attacks

Use Cisco AMP for Endpoints to block all SSL connection

Use Cisco Tetration to track SSL connections to servers.

Answer

Questions # 104:

Question # 104

Refer to the exhibit. A Cisco Secure Firewall Management Center, 7.0 device fails to receive intelligence feed updates. The Cisco Secure Firewall Management Center is configured to use a proxy server that performs SSL inspection. Which action allows the Cisco Secure Firewall Management Center device to download the intelligence feed updates?

Options:

Install a self-signed certificate on the proxy server for intelligence.sourcefire.com.

Verify that the proxy server can use HTTPS to communicate to the internet.

Ensure that proxy authentication is disabled for the Cisco Secure Firewall Management Center device.

Bypass the proxy server for intelligence.sourcefire.com.

Answer

Questions # 105:

An engineer Is configuring a Cisco FTD device to place on the Finance VLAN to provide additional protection tor company financial data. The device must be deployed without requiring any changes on the end user workstations, which currently use DHCP lo obtain an IP address. How must the engineer deploy the device to meet this requirement?

Options:

Deploy the device in routed mode and allow DHCP traffic in the access control policies.

Deploy the device in routed made aid enable the DHCP Relay feature.

Deploy the device in transparent mode and allow DHCP traffic in the access control policies

Deploy the device in transparent mode and enable the DHCP Server feature.

Answer

Explanation

Transparent mode allows the FTD device to act as a “bump in the wire” that does not affect the IP addressing of the network. The end user workstations will not need any changes to their configuration, as they will still receive an IP address from the same DHCP server. However, the FTD device must allow DHCP traffic in the access control policies, otherwise it will block the DHCP requests and replies1

Questions # 106:

An engineer is working on a LAN switch and has noticed that its network connection to the mime Cisco IPS has gone down Upon troubleshooting it is determined that the switch is working as expected What must have been implemented for this failure to occur?

Options:

The upstream router has a misconfigured routing protocol

Link-state propagation is enabled

The Cisco IPS has been configured to be in fail-open mode

The Cisco IPS is configured in detection mode

Answer

Questions # 107:

A connectivity issue is occurring between a client and a server which are communicating through a Cisco Firepower device While troubleshooting, a network administrator sees that traffic is reaching the server, but the client is not getting a response Which step must be taken to resolve this issue without initiating traffic from the client?

Options:

Use packet-tracer to ensure that traffic is not being blocked by an access list.

Use packet capture to ensure that traffic is not being blocked by an access list.

Use packet capture to validate that the packet passes through the firewall and is NATed to the corrected IP address.

Use packet-tracer to validate that the packet passes through the firewall and is NATed to the corrected IP address.

Answer

Questions # 108:

Which two dynamic routing protocols are supported in Firepower Threat Defense without using FlexConfig? (Choose two.)

Options:

EIGRP

OSPF

static routing

IS-IS

BGP

Answer

B, E

Explanation

[Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/660/fdm/fptd-fdm-config-guide-660/fptd- fdm-routing.html, , ]

Questions # 109:

In which two places can thresholding settings be configured? (Choose two.)

Options:

on each IPS rule

globally, within the network analysis policy

globally, per intrusion policy

on each access control rule

per preprocessor, within the network analysis policy

Answer

A, C

Explanation

[Reference: https://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa- firepower-module-user-guide-v541/Intrusion-Global-Threshold.pdf, , ]

Questions # 110:

Which action must be taken on the Cisco FMC when a packet bypass is configured in case the Snort engine is down or a packet takes too long to process?

Options:

Enable Inspect Local Router Traffic

Enable Automatic Application Bypass

Configure Fastpath rules to bypass inspection

Add a Bypass Threshold policy for failures

Answer

Viewing page 11 out of 12 pages

Viewing questions 101-110 out of questions

Modal title

Registered Required

In order to participate in the comments you need to be logged-in.
You can sign-up or login (it's free).