300-710 by Cisco Valid Free Exam Practice Test

Question 1

Which Cisco Advanced Malware Protection for Endpoints policy is used only for monitoring endpoint actively?

A. triage B. protection C. Windows domain controller D. audit

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit. An engineer configures a NAT rule allowing clients to use the internet only if clients are located on the directly connected internal network. Dynamic auto PAT must be configured. Drag and drop the NAT rules from the left onto the corresponding targets on the right. Not all options are used.

Correct Answer:

Explanation:
A screenshot of a computer AI-generated content may be incorrect.

Question 3

An engineer is troubleshooting HTTP traffic to a web server using the packet capture tool on Cisco FMC.
When reviewing the captures, the engineer notices that there are a lot of packets that are not sourced from or destined to the web server being captured. How can the engineer reduce the strain of capturing packets for irrelevant traffic on the Cisco FTD device?

A. Use the -c option to restrict the packet capture to only the first 100 packets. B. Use the host filter in the packet capture to capture traffic to or from a specific host. C. Redirect the packet capture output to a. pcap file that can be opened with Wireshark. D. Use an access-list within the packet capture to permit only HTTP traffic to and from the web server.

Correct Answer: B

Question 4

The administrator notices that there is malware present with an .exe extension and needs to verify if any of the systems on the network are running the executable file. What must be configured within Cisco AMP for Endpoints to show this data?

A. file analysis B. vulnerable software C. threat root cause D. prevalence

Correct Answer: D

Question 5

Refer to the exhibit.

A Cisco Secure Firewall Threat Defense (FTD) device is deployed in inline mode with an inline set. The network engineer wants router R2 to remove the directly connected route M 68.1.0/24 from its routing table when the cable between routed R1 and the Secure FTD device Is disconnected. Which action must the engineer take?
1

A. Implement the Propagate Link Stale option on the Secure FTD device B. Disable hardware bypass on the Secure FTD device. C. Implement autostate functionality on the Gi0/2 interface of R2 D. Establish a routing protocol between R1 and R2.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

An organization has implemented Cisco Firepower without IPS capabilities and now wants to enable inspection for their traffic. They need to be able to detect protocol anomalies and utilize the Snort rule sets to detect malicious behaviour. How is this accomplished?

A. Modify the network discovery policy to detect new hosts to inspect B. Modify the access control policy to redirect interesting traffic to the engine C. Modify the network analysis policy to process the packets for inspection D. Modify the intrusion policy to determine the minimum severity of an event to inspect.

Correct Answer: D

Question 7

A security administrator must configure Cisco Secure Firewall Management Center so that certain intrusion rules are active only during specified times. Which action must the administrator take?

A. Create time-based access control rules that apply the intrusion policy at the scheduled intervals. B. Create a scheduled task that activates and deactivates the intrusion rules at the required times. C. Assign a time range directly to every intrusion rule in the intrusion policy. D. Configure a time-based trigger in the intrusion policy to enable the rules at defined times.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 8

A network administrator configured a NAT policy that translates a public IP address to an internal web server IP address. An access policy has also been created that allows any source to reach the public IP address on port 80. The web server is still not reachable from the Internet on port 80. Which configuration change is needed?

A. The access policy rule must be configured for the action trust. B. The access policy must allow traffic to the internal web server IP address. C. The NAT policy must be modified to translate the source IP address as well as destination IP address. D. The intrusion policy must be disabled for port 80.

Correct Answer: B

Question 9

Which limitation applies to Cisco Firepower Management Center dashboards in a multidomain environment?

A. Child domains can view but not edit dashboards that originate from an ancestor domain. B. Child domains have access to only a limited set of widgets from ancestor domains. C. Only the administrator of the top ancestor domain can view dashboards. D. Child domains cannot view dashboards that originate from an ancestor domain.

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 10

Which interface type allows packets to be dropped?

A. passive B. inline C. TAP D. ERSPAN

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 11

Refer to the exhibit. An engineer is deploying a new instance of Cisco Secure Firewall Threat Defense. Which action must the engineer take next so that Client_A and Client_B receive an IP address via DHCP from Server_A?

A. Add another DHCP pool on Server_A with DHCP relay on Secure Firewall Threat Defense. B. Add access rules that allow DHCP traffic by using Cisco Secure Firewall Management Center. C. Disable Option 82 in the DHCP relay configuration properties using Secure Firewall Management Center. D. Disable all the DHCP Snort rules by using Secure Firewall Device Manager.

Correct Answer: B

Question 12

Which two routing options are valid with Cisco Firepower Threat Defense? (Choose two.)

A. BGPv6 B. ECMP with up to three equal cost paths across a single interface C. BGPv4 in transparent firewall mode D. ECMP with up to three equal cost paths across multiple interfaces E. BGPv4 with nonstop forwarding

Correct Answer: A,B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 13

The CEO ask a network administrator to present to management a dashboard that shows custom analysis tables for the top DNS queries URL category statistics, and the URL reputation statistics.
Which action must the administrator take to quickly produce this information for management?

A. Create a new dashboard and add three custom analysis widgets that specify the tables needed. B. Modify the Connection Events dashboard to display the information in a view for management. C. Run the Attack report and filter on DNS to show this information. D. Copy the intrusion events dashboard tab and modify each widget to show the correct charts.

Correct Answer: A

Cisco Securing Networks with Cisco Firepower - 300-710 Exam Practice Test