300-710 Exam Dumps - Securing Networks with Cisco Firepower (300-710 SNCF) v1.2

Searching for workable clues to ace the Cisco 300-710 Exam? You’re on the right place! ExamCert has realistic, trusted and authentic exam prep tools to help you achieve your desired credential. ExamCert’s 300-710 PDF Study Guide, Testing Engine and Exam Dumps follow a reliable exam preparation strategy, providing you the most relevant and updated study material that is crafted in an easy to learn format of questions and answers. ExamCert’s study tools aim at simplifying all complex and confusing concepts of the exam and introduce you to the real exam scenario and practice it with the help of its testing engine and real exam dumps

Go to page:

<< First
Prev
3
4
5
6
7
8
9
10
11
12
Next
Last >>

Question # 57

Refer to the exhibit. Authenticated VPN users at a financial institution can reach trading servers in the 10.200.0.0/16 range, but one user, vpn-useM is not able to access the trading application at 10.200.5.50 on TCP 8443. An engineer enables system support trace on the Cisco Secure Firewall Threat Defense. Which action must be performed to resolve the issue?

Modify the group policy to assign a higher-privilege VPN filter ACL to all users in vpn-user1 ' s group, overriding the ACL applied by DAP.

Edit the group policy for the VPN tunnel group and permit 10.200.5.50/8443 in the split-tunnel ACL.

Update the DAP RESTRICT_TRADING ACL to permit TCP to 10.200.5.50 on port 8443.

Add a static route for 10.200.5.0/24 pointing to the inside interface, and a static route for the vpn-user1 host 172.16.100.10 to the outside interface.

Full Access

Question # 58

When packet capture is used on a Cisco Secure Firewall Threat Defense device and the packet flow is wailing on the malware query, which Snort verdict appears?

retry

replace

block

blocfcflow

Full Access

Question # 59

A mid-sized company is experiencing higher network bandwidth utilization due to a recent acquisition The network operations team is asked to scale up their one Cisco FTD appliance deployment to higher capacities due to the increased network bandwidth. Which design option should be used to accomplish this goal?

Deploy multiple Cisco FTD appliances in firewall clustering mode to increase performance.

Deploy multiple Cisco FTD appliances using VPN load-balancing to scale performance.

Deploy multiple Cisco FTD HA pairs to increase performance

Deploy multiple Cisco FTD HA pairs in clustering mode to increase performance

Full Access

Question # 60

An organization wants to secure traffic from their branch office to the headquarter building using Cisco Firepower devices, They want to ensure that their Cisco Firepower devices are not wasting resources on inspecting the VPN traffic. What must be done to meet these requirements?

Configure the Cisco Firepower devices to ignore the VPN traffic using prefilter policies

Enable a flexconfig policy to re-classify VPN traffic so that it no longer appears as interesting traffic

Configure the Cisco Firepower devices to bypass the access control policies for VPN traffic.

Tune the intrusion policies in order to allow the VPN traffic through without inspection

Full Access

Question # 61

An engineer must define a URL object on Cisco FMC. What is the correct method to specify the URL without performing SSL inspection?

Use Subject Common Name value.

Specify all subdomains in the object group.

Specify the protocol in the object.

Include all URLs from CRL Distribution Points.

Full Access

Question # 62

Which Cisco Rapid Threat Containment mitigation action is enabled by integrating pxGrid Adaptive Network Control with Cisco ISE and Cisco Secure Firewall Management Center?

Block

Terminate

Suspend

Reject

Full Access

Question # 63

Refer to the exhibit. A Cisco Secure Firewall Management Center, 7.0 device fails to receive intelligence feed updates. The Cisco Secure Firewall Management Center is configured to use a proxy server that performs SSL inspection. Which action allows the Cisco Secure Firewall Management Center device to download the intelligence feed updates?

Install a self-signed certificate on the proxy server for intelligence.sourcefire.com.

Verify that the proxy server can use HTTPS to communicate to the internet.

Ensure that proxy authentication is disabled for the Cisco Secure Firewall Management Center device.

Bypass the proxy server for intelligence.sourcefire.com.

Full Access

Question # 64

A network administrator must create an EtherChannel Interface on a new Cisco Firepower 9300 appliance registered with an FMC tor high availability. Where must the administrator create the EtherChannel interface?

FMC CLI

FTD CLI

FXOS CLI

FMC GUI

Full Access

Answer:

Explanation:

An EtherChannel interface is a logical interface that consists of a bundle of individual Ethernet links that act as a single network link.Â An EtherChannel interface can increase the bandwidth and reliability of a network connection5.

On a Cisco Firepower 9300 appliance registered with an FMC for high availability, the network administrator must create the EtherChannel interface on the FXOS CLI.Â The FXOS is the operating system that runs on the Firepower 9300 chassis and provides hardware management functions such as interface configuration, power supply status, fan speed control, and so on6.

To create an EtherChannel interface on the FXOS CLI, the network administrator can follow these steps5:

Connect to the FXOS CLI using SSH or console.

Enter scope eth-uplink command to enter Ethernet uplink mode.

Enter create port-channel command to create an EtherChannel interface.

Enter a port-channel ID (1-48) and a mode (on or active) for the EtherChannel interface.

Enter add interface command to add physical interfaces to the EtherChannel interface.

Enter one or more interface IDs (for example, 1/1) for the physical interfaces.

Enter commit-buffer command to save the changes.

The other options are incorrect because:

The FMC CLI does not provide any commands to create an EtherChannel interface on a Firepower 9300 appliance.Â The FMC CLI is mainly used for managing FMC settings such as backup, restore, upgrade, troubleshoot, and so on7.

The FTD CLI does not provide any commands to create an EtherChannel interface on a Firepower 9300 appliance.Â The FTD CLI is mainly used for managing FTD settings such as routing, NAT, VPN, access control, and so on8.

The FMC GUI does not provide any options to create an EtherChannel interface on a Firepower 9300 appliance.Â The FMC GUI is mainly used for managing FTD policies such as access control, intrusion, file, malware, and so on9.

Go to page: