75only - Ends in 0d 00h 00m 00s - Coupon code = 75only

Pass the Cisco CCNP Security 300-710 Questions and answers with Dumpstech

Home
Cisco
CCNP Security
300-710
300-710 Questions and Answers

Exam 300-710 Premium Access

View all detail and faqs for the 300-710 exam

Go to Exam

Practice at least 50% of the questions to maximize your chances of passing.

Viewing page 12 out of 13 pages

Viewing questions 111-120 out of questions

Questions # 111:

An engineer is investigating connectivity problems on Cisco Firepower that is using service group tags. Specific devices are not being tagged correctly, which is preventing clients from using the proper policies when going through the firewall How is this issue resolved?

Options:

Use traceroute with advanced options.

Use Wireshark with an IP subnet filter.

Use a packet capture with match criteria.

Use a packet sniffer with correct filtering

Answer

Questions # 112:

An engineer is configuring multiple Cisco FTD appliances (or use in the network. Which rule must the engineer follow while defining interface objects in Cisco FMC for use with interfaces across multiple devices?

Options:

An interface cannot belong to a security zone and an interface group

Interface groups can contain multiple interface types

Interface groups can contain interfaces from many devices.

Two security zones can contain the same interface

Answer

Questions # 113:

Which Firepower feature allows users to configure bridges in routed mode and enables devices to perform Layer 2 switching between interfaces?

Options:

FlexConfig

BDI

SGT

IRB

Answer

Explanation

[Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/relnotes/Firepower_System_Release_Notes_Version_620/new_features_and_functionality.html, , ]

Questions # 114:

Refer to the exhibit.

What must be done to fix access to this website while preventing the same communication to all other websites?

Options:

Create an intrusion policy rule to have Snort allow port 80 to only 172.1.1 50.

Create an access control policy rule to allow port 80 to only 172.1.1 50.

Create an intrusion policy rule to have Snort allow port 443 to only 172.1.1.50

Create an access control policy rule to allow port 443 to only 172.1.1 50

Answer

Questions # 115:

An engineer must configure high availability for the Cisco Firepower devices. The current network topology does not allow for two devices to pass traffic concurrently. How must the devices be implemented in this environment?

Options:

in active/active mode

in a cluster span EtherChannel

in active/passive mode

in cluster interface mode

Answer

Questions # 116:

How should a high-availability pair of Cisco Secure Firewall Threat Defense Virtual appliances be deployed to Cisco Secure Firewall Management Center?

Options:

Configure high availability first, then add only the primary Cisco Secure Firewall Threat Defense Virtual appliance to Cisco Secure Firewall Management Center.

Add the primary and secondary Cisco Secure Firewall Threat Defense Virtual appliances to Cisco Secure Firewall Management Center first, then configure high availability.

Add the primary appliance to Cisco Secure Firewall Management Center first, then configure high availability.

Configure high availability first, then add the primary and secondary appliances to Cisco Secure Firewall Management Center.

Answer

Questions # 117:

A network administrator must send a daily email report to management detailing changes made during the previous 24 hours in Cisco Secure Firewall Management Center. Which system setting must be enabled to meet this requirement?

Options:

Change Reconciliation

Send Audit Log to HTTP Server

Send Audit Log to Syslog

STIG Compliance

Answer

Explanation

Change Reconciliation records snapshots whenever users save system-configuration changes and combines those snapshots into a detailed report covering the previous 24 hours. Under System > Configuration > Change Reconciliation, the administrator enables the feature, selects the daily execution time, and specifies management’s recipient email addresses. The administrator can also include policy-configuration changes and enable the full change history instead of receiving only a consolidated view. An email relay host must be configured so that Management Center can deliver the report. Sending audit logs to an HTTP or syslog server streams audit events to an external collector; it does not generate the required daily email summary. STIG Compliance applies security-hardening settings and is unrelated to scheduled change reporting. Cisco Change Reconciliation documentation

Questions # 118:

What is an attribute of the risk reporting capability in Cisco Secure Firewall Management Center?

Options:

Includes all domains in a multidomain system

Uses the same templates available to standard reports

Includes the current domain in a multidomain system

Uses the XML format to export all reporting

Answer

Questions # 119:

Refer to the exhibit.

Question # 119

An administrator is looking at some of the reporting capabilities for Cisco Firepower and noticed this section of the Network Risk report showing a lot of SSL activity that cloud be used for evasion. Which action will mitigate this risk?

Options:

Use SSL decryption to analyze the packets.

Use encrypted traffic analytics to detect attacks

Use Cisco AMP for Endpoints to block all SSL connection

Use Cisco Tetration to track SSL connections to servers.

Answer

Questions # 120:

What is the maximum SHA level of filtering that Threat Intelligence Director supports?

Options:

SHA-1024

SHA-4096

SHA-512

SHA-256

Answer

Explanation

[Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/cisco_threat_intelligence_directortid_.html, , , , , , ]

Viewing page 12 out of 13 pages

Viewing questions 111-120 out of questions

Modal title

Registered Required

In order to participate in the comments you need to be logged-in.
You can sign-up or login (it's free).