75only - Ends in 0d 00h 00m 00s - Coupon code = 75only

Pass the Cisco CCNP Security 300-710 Questions and answers with Dumpstech

Home
Cisco
CCNP Security
300-710
300-710 Questions and Answers

Exam 300-710 Premium Access

View all detail and faqs for the 300-710 exam

Go to Exam

Practice at least 50% of the questions to maximize your chances of passing.

Viewing page 13 out of 13 pages

Viewing questions 121-130 out of questions

Questions # 121:

Drag and drop the configuration steps from the left into the sequence on the right to enable external authentication on Cisco FMC to a RADIUS server.

Question # 121

Options:

Answer

Answer:

Explanation

4, 1, 2, 3

Questions # 122:

An engineer must investigate a connectivity issue by using Cisco Secure Firewall Management Center to access the Packet Capture feature on a Cisco Secure Firewall Threat Defense

device. The engineer must see a real packet going through the Secure Firewall Threat Defense device and the Snort detection actions. While reviewing the packet capture, the engineer

discovers that the Snort detection actions are missing. Which action must the engineer take to resolve the issue?

Options:

Specify the packet size.

Specify the buffer size.

Enable the Continuous Capture option.

Enable the Trace option.

Answer

Questions # 123:

A network administrator configured a NAT policy that translates a public IP address to an internal web server IP address. An access policy has also been created that allows any source to reach the public IP address on port 80. The web server is still not reachable from the Internet on port 80. Which configuration change is needed?

Options:

The intrusion policy must be disabled for port 80.

The access policy rule must be configured for the action trust.

The NAT policy must be modified to translate the source IP address as well as destination IP address.

The access policy must allow traffic to the internal web server IP address.

Answer

Questions # 124:

Which two statements about bridge-group interfaces in Cisco FTD are true? (Choose two.)

Options:

The BVI IP address must be in a separate subnet from the connected network.

Bridge groups are supported in both transparent and routed firewall modes.

Bridge groups are supported only in transparent firewall mode.

Bidirectional Forwarding Detection echo packets are allowed through the FTD when using bridge-group members.

Each directly connected network must be on the same subnet.

Answer

B, E

Explanation

[Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/transparent_or_routed_firewall_mode_for_firepower_threat_defense.html, , , , ]

Questions # 125:

A network administrator notices that remote access VPN users are not reachable from inside the network. It is determined that routing is configured correctly, however return traffic is entering the firewall but not leaving it What is the reason for this issue?

Options:

A manual NAT exemption rule does not exist at the top of the NAT table.

An external NAT IP address is not configured.

An external NAT IP address is configured to match the wrong interface.

An object NAT exemption rule does not exist at the top of the NAT table.

Answer

Explanation

https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/212702-configure-and-verify-nat-on-ftd.html

Questions # 126:

An engineer defines a new rule while configuring an Access Control Policy. After deploying the policy, the rule is not working as expected and the hit counters associated with the rule are showing zero. What is causing this error?

Options:

Logging is not enabled for the rule.

The rule was not enabled after being created.

The wrong source interface for Snort was selected in the rule.

An incorrect application signature was used in the rule.

Answer

Questions # 127:

Which license type is required on Cisco ISE to integrate with Cisco FMC pxGrid?

Options:

mobility

plus

base

apex

Answer

Questions # 128:

A network administrator is troubleshooting access to a website hosted behind a Cisco FTD device External clients cannot access the web server via HTTPS The IP address configured on the web server is 192 168 7.46 The administrator is running the command capture CAP interface outside match ip any 192.168.7.46 255.255.255.255 but cannot see any traffic in the capture Why is this occurring?

Options:

The capture must use the public IP address of the web server.

The FTD has no route to the web server.

Theaccess policy is blocking the traffic.

The packet capture shows only blocked traffic

Answer

Questions # 129:

Which firewall design will allow It to forward traffic at layers 2 and 3 for the same subnet?

Options:

Cisco Firepower Threat Defense mode

routed mode

Integrated routing and bridging

transparent mode

Answer

Explanation

Transparent mode is a firewall configuration in which the firewall acts as a “bump in the wire” or a “stealth firewall” and is not seen as a router hop to connected devices. In transparent mode, the firewall can forward traffic at both layer 2 and layer 3 for the same subnet, as it does not perform any address translation or routing. The firewall inspects the traffic and applies security policies based on the source and destination IP addresses, ports, and protocols. Transparent mode is useful when you want to deploy a firewall without changing the existing network topology or addressing scheme1.

Questions # 130:

An engineer is creating an URL object on Cisco FMC How must it be configured so that the object will match for HTTPS traffic in an access control policy?

Options:

Specify the protocol to match (HTTP or HTTPS).

Use the FQDN including the subdomain for the website

Define the path to the individual webpage that uses HTTPS.

Use the subject common name from the website certificate

Answer

Viewing page 13 out of 13 pages

Viewing questions 121-130 out of questions

Modal title

Registered Required

In order to participate in the comments you need to be logged-in.
You can sign-up or login (it's free).