Maximum Grades By Making ready With 300-710 Dumps UPDATED 2023 [Q54-Q74]

Rate this post

Maximum Grades By Making ready With 300-710 Dumps UPDATED 2023

Prepare 300-710 Exam Questions [2023] Recently Updated Questions

Cisco 300-710 Exam Syllabus Topics:

Topic	Details
Topic 1	Implement Threat Intelligence Director For Third-Party Security Intelligence Feeds Analyze Risk And Standard Reports
Topic 2	Configure These Policies In Cisco Firepower Management Center Implement NGFW Modes
Topic 3	Configure These Features Using Cisco Firepower Management Center Management And Troubleshooting
Topic 4	Describe Cisco FMC Pxgrid Integration With Cisco Identify Services Engine (ISE) Troubleshoot With FMC CLI And GUI
Topic 5	Configure System Settings In Cisco Firepower Management Center Describe IRB Configurations
Topic 6	Troubleshoot Using Packet Capture Procedures Implement NGIPS Modes

Q54. An engineer configures an access control rule that deploys file policy configurations to security zones, and it cause the device to restart. What is the reason for the restart?

Source or destination security zones in the access control rule matches the security zones that are associated with interfaces on the target devices.

The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the destination policy.

Source or destination security zones in the source tunnel zone do not match the security zones that are associated with interfaces on the target devices.

The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the source policy.

Q55. Which two considerations must be made when deleting and re-adding devices while managing them via Cisco FMC? (Choose two.)

An option to re-apply NAT and VPN policies during registration is available, so users do not need to re- apply the policies after registration is completed.

Before re-adding the device in Cisco FMC, the manager must be added back.

Once a device has been deleted, it must be reconfigured before it is re-added to the Cisco FMC.

The Cisco FMC web interface prompts users to re-apply access control policies.

There is no option to re-apply NAT and VPN policies during registration available, so users need to re-apply the policies after registration is completed.

Q56. An engineer integrates Cisco FMC and Cisco ISE using pxGrid. Which role is assigned for Cisco FMC?

controller

publisher

client

server

Q57. When do you need the file-size command option during troubleshooting with packet capture?

when capture packets are less than 16 MB

when capture packets are restricted from the secondary memory

when capture packets exceed 10 GB

when capture packets exceed 32 MB

Q58. In a Cisco AMP for Networks deployment, which disposition is returned if the cloud cannot be reached?

unavailable

unknown

clean

disconnected

Q59. An engineer has been tasked with using Cisco FMC to determine if files being sent through the network are malware. Which two configuration takes must be performed to achieve this file lookup? (Choose two.)

The Cisco FMC needs to include a SSL decryption policy.

The Cisco FMC needs to connect to the Cisco AMP for Endpoints service.

The Cisco FMC needs to connect to the Cisco ThreatGrid service directly for sandboxing.

The Cisco FMC needs to connect with the FireAMP Cloud.

The Cisco FMC needs to include a file inspection policy for malware lookup.

Q60. An administrator is setting up Cisco Firepower to send data to the Cisco Stealthwatch appliances. The NetFlow_Set_Parameters object is already created, but NetFlow is not being sent to the flow collector. What must be done to prevent this from occurring?

Add the NetFlow_Send_Destination object to the configuration

Create a Security Intelligence object to send the data to Cisco Stealthwatch

Create a service identifier to enable the NetFlow service

Add the NetFlow_Add_Destination object to the configuration

Q61. administrator is configuring SNORT inspection policies and is seeing failed deployment messages in Cisco FMC . What information should the administrator generate for Cisco TAC to help troubleshoot?

A Troubleshoot” file for the device in question.

A “show tech” file for the device in question

A “show tech” for the Cisco FMC.

A “troubleshoot” file for the Cisco FMC

Q62. A network administrator discovers that a user connected to a file server and downloaded a malware file. The Cisc FMC generated an alert for the malware event, however the user still remained connected. Which Cisco APM file rule action within the Cisco FMC must be set to resolve this issue?

Detect Files

Malware Cloud Lookup

Local Malware Analysis

Reset Connection

Q63. What is a behavior of a Cisco FMC database purge?

User login and history data are removed from the database if the User Activity check box is selected.

Data can be recovered from the device.

The appropriate process is restarted.

The specified data is removed from Cisco FMC and kept for two weeks.

Q64. What is a result of enabling Cisco FTD clustering?

For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections.

Integrated Routing and Bridging is supported on the master unit.

Site-to-site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails.

All Firepower appliances can support Cisco FTD clustering.

Q65. Which firewall design will allow It to forward traffic at layers 2 and 3 for the same subnet?

Cisco Firepower Threat Defense mode

routed mode

Integrated routing and bridging

transparent mode

Q66. An engineer must define a URL object on Cisco FMC. What is the correct method to specify the URL without performing SSL inspection?

Use Subject Common Name value.

Specify all subdomains in the object group.

Specify the protocol in the object.

Include all URLs from CRL Distribution Points.

Q67. Which Cisco Firepower feature is used to reduce the number of events received in a period of time?

rate-limiting

suspending

correlation

thresholding

Q68. An engineer is configuring a second Cisco FMC as a standby device but is unable to register with the active unit. What is causing this issue?

The primary FMC currently has devices connected to it.

The code versions running on the Cisco FMC devices are different

The licensing purchased does not include high availability

There is only 10 Mbps of bandwidth between the two devices.

Q69. An engineer wants to connect a single IP subnet through a Cisco FTD firewall and enforce policy. There is a requirement to present the internal IP subnet to the outside as a different IP address. What must be configured to meet these requirements?

Configure the downstream router to perform NAT.

Configure the upstream router to perform NAT.

Configure the Cisco FTD firewall in routed mode with NAT enabled.

Configure the Cisco FTD firewall in transparent mode with NAT enabled.

Q70. Refer to the exhibit.

And engineer is analyzing the Attacks Risk Report and finds that there are over 300 instances of new operating systems being seen on the network How is the Firepower configuration updated to protect these new operating systems?

Cisco Firepower automatically updates the policies.

The administrator requests a Remediation Recommendation Report from Cisco Firepower

Cisco Firepower gives recommendations to update the policies.

The administrator manually updates the policies.

Q71. Refer to the exhibit.

A systems administrator conducts a connectivity test to their SCCM server from a host machine and gets no response from the server. Which action ensures that the ping packets reach the destination and that the host receives replies?

Create an access control policy rule that allows ICMP traffic.

Configure a custom Snort signature to allow ICMP traffic after Inspection.

Modify the Snort rules to allow ICMP traffic.

Create an ICMP allow list and add the ICMP destination to remove it from the implicit deny list.

Q72. Refer to the exhibit. What must be done to fix access to this website while preventing the same communication to all other websites?

Create an intrusion policy rule to have Snort allow port 80 to only 172.1.1.50.

Create an intrusion policy rule to have Snort allow port 443 to only 172.1.1.50.

Create an access control policy rule to allow port 443 to only 172.1.1.50.

Create an access control policy rule to allow port 80 to only 172.1.1.50.

Q73. An engineer is configuring a cisco FTD appliance in IPS-only mode and needs to utilize fail-to-wire interfaces. Which interface mode should be used to meet these requirements?

transparent

routed

passive

inline set

Q74. Which command-line mode is supported from the Cisco Firepower Management Center CLI?

privileged

user

configuration

admin