Unique Top-selling 300-710 Exams – New 2024 Cisco Pratice Exam [Q101-Q125]

NEW QUESTION 101
A network administrator is migrating from a Cisco ASA to a Cisco FTD.
EIGRP is configured on the Cisco ASA but it is not available in the Cisco FMC.
Which action must the administrator take to enable this feature on the Cisco FTD?

Configure EIGRP parameters using FlexConfig objects.

Add the command feature eigrp via the FTD CLI.

Create a custom variable set and enable the feature in the variable set.

Enable advanced configuration options in the FMC.

NEW QUESTION 102
An analyst is investigating a potentially compromised endpoint within the network and pulls a host report for the endpoint in question to collect metrics and documentation. What information should be taken from this report for the investigation?

client applications by user, web applications, and user connections

number of attacked machines, sources of the attack, and traffic patterns

intrusion events, host connections, and user sessions

threat detections over time and application protocols transferring malware

NEW QUESTION 103
Refer to the exhibit.

An engineer is modifying an access control policy to add a rule to Inspect all DNS traffic that passes it making the change and deploying the policy, they see that DNS traffic Is not being Inspected by the Snort engine. What is……

The rule must specify the security zone that originates the traffic.

The rule Is configured with the wrong setting for the source port.

The rule must define the source network for inspection as well as the port.

NEW QUESTION 104
A security engineer must configure policies tor a recently deployed Cisco FTD. The security policy for the company dictates that when five or more connections from external sources are initiated within 2 minutes, there is cause for concern. Which type of policy must be configured in Cisco FMC z generate an alert when this condition is triggered?

application detector

access control

intrusion

correlation

NEW QUESTION 105
A Cisco FTD device is running in transparent firewall mode with a VTEP bridge group member ingress interface. What must be considered by an engineer tasked with specifying a destination MAC address for a packet trace?

Only the UDP packet type is supported.

The output format option for the packet logs is unavailable.

The destination MAC address is optional if a VLAN ID value is entered.

The VLAN ID and destination MAC address are optional.

NEW QUESTION 106
Which command is run on an FTD unit to associate the unit to an FMC manager that is at IP address 10.0.0.10, and that has the registration key Cisco123?

configure manager local 10.0.0.10 Cisco123

configure manager add Cisco123 10.0.0.10

configure manager local Cisco123 10.0.0.10

configure manager add 10.0.0.10 Cisco123

NEW QUESTION 107
A network administrator reviews the file report for the last month and notices that all file types, except exe.
show a disposition of unknown. What is the cause of this issue?

The malware license has not been applied to the Cisco FTD.

The Cisco FMC cannot reach the Internet to analyze files.

A file policy has not been applied to the access policy.

Only Spero file analysis is enabled.

NEW QUESTION 108
Which Cisco Firepower rule action displays an HTTP warning page?

Monitor

Block

Interactive Block

Allow with Warning

NEW QUESTION 109
Which report template field format is available in Cisco FMC?

box lever chart

arrow chart

bar chart

benchmark chart

NEW QUESTION 110
Which command is run on an FTD unit to associate the unit to an FMC manager that is at IP address
10.0.0.10, and that has the registration key Cisco123?

configure manager local 10.0.0.10 Cisco123

configure manager add Cisco123 10.0.0.10

configure manager local Cisco123 10.0.0.10

configure manager add 10.0.0.10 Cisco123

NEW QUESTION 111

Refer to the exhibit. An engineer is analyzing the Attacks Risk Report and finds that there are over 300 instances of new operating systems being seen on the network. How is the Firepower configuration updated to protect these new operating systems?

The administrator manually updates the policies.

The administrator requests a Remediation Recommendation Report from Cisco Firepower.

Cisco Firepower gives recommendations to update the policies.

Cisco Firepower automatically updates the policies.

NEW QUESTION 112
While configuring FTD, a network engineer wants to ensure that traffic passing through the appliance does not require routing or Vlan rewriting. Which interface mode should the engineer implement to accomplish this task?

passive

transparent

Inline tap

Inline set

NEW QUESTION 113
What is a feature of Cisco AMP private cloud?

It supports anonymized retrieval of threat intelligence

It supports security intelligence filtering.

It disables direct connections to the public cloud.

It performs dynamic analysis

NEW QUESTION 114
What is a characteristic of bridge groups on a Cisco FTD?

In routed firewall mode, routing between bridge groups must pass through a routed interface.

In routed firewall mode, routing between bridge groups is supported.

In transparent firewall mode, routing between bridge groups is supported

Routing between bridge groups is achieved only with a router-on-a-stick configuration on a connected router

NEW QUESTION 115
When deploying a Cisco ASA Firepower module, an organization wants to evaluate the contents of the traffic without affecting the network. It is currently configured to have more than one instance of the same device on the physical appliance Which deployment mode meets the needs of the organization?

inline tap monitor-only mode

passive monitor-only mode

passive tap monitor-only mode

inline mode

NEW QUESTION 116
Which interface type allows packets to be dropped?

passive

inline

ERSPAN

TAP

NEW QUESTION 117
Refer to the exhibit.

And engineer is analyzing the Attacks Risk Report and finds that there are over 300 instances of new operating systems being seen on the network How is the Firepower configuration updated to protect these new operating systems?

Cisco Firepower automatically updates the policies.

The administrator requests a Remediation Recommendation Report from Cisco Firepower

Cisco Firepower gives recommendations to update the policies.

The administrator manually updates the policies.
Ref: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Tailoring_Intrusion_Protection_to_Your_Network_Assets.html

NEW QUESTION 118
Which connector is used to integrate Cisco ISE with Cisco FMC for Rapid Threat Containment?

pxGrid

FTD RTC

FMC RTC

ISEGrid

NEW QUESTION 119
An engineer is using the configure manager add <FMC IP> Cisc402098527 command to add a new Cisco FTD device to the Cisco FMC; however, the device is not being added. Why Is this occurring?

The NAT ID is required since the Cisco FMC is behind a NAT device.

The IP address used should be that of the Cisco FTD. not the Cisco FMC.

DONOTRESOLVE must be added to the command

The registration key is missing from the command

NEW QUESTION 120
Drag and drop the steps to restore an automatic device registration failure on the standby Cisco FMC from the left into the correct order on the right. Not all options are used.

NEW QUESTION 121
When do you need the file-size command option during troubleshooting with packet capture?

when capture packets are less than 16 MB

when capture packets are restricted from the secondary memory

when capture packets exceed 10 GB

when capture packets exceed 32 MB

NEW QUESTION 122
What is the advantage of having Cisco Firepower devices send events to Cisco Threat Response via the security services exchange portal directly as opposed to using syslog?

All types of Cisco Firepower devices are supported.

An on-premises proxy server does not need to be set up and maintained.

Cisco Firepower devices do not need to be connected to the Internet.

Supports all devices that are running supported versions of Cisco Firepower.

NEW QUESTION 123
Which command is typed at the CLI on the primary Cisco FTD unit to temporarily stop running high- availability?

configure high-availability resume

configure high-availability disable

system support network-options

configure high-availability suspend

NEW QUESTION 124
Which limitation applies to Cisco Firepower Management Center dashboards in a multidomain environment?

Child domains can view but not edit dashboards that originate from an ancestor domain.

Child domains have access to only a limited set of widgets from ancestor domains.

Only the administrator of the top ancestor domain can view dashboards.

Child domains cannot view dashboards that originate from an ancestor domain.

NEW QUESTION 125
An organization is migrating their Cisco ASA devices running in multicontext mode to Cisco FTD devices. Which action must be taken to ensure that each context on the Cisco ASA is logically separated in the Cisco FTD devices?

Add a native instance to distribute traffic to each Cisco FTD context.

Add the Cisco FTD device to the Cisco ASA port channels.

Configure a container instance in the Cisco FTD for each context in the Cisco ASA.

Configure the Cisco FTD to use port channels spanning multiple networks.

Leave a Reply Cancel reply