Cisco 300-710 Free Practice Questions

NEW QUESTION 1
What is the maximum SHA level of filtering that Threat Intelligence Director supports?

• A. SHA-1024
• B. SHA-4096
• C. SHA-512
• D. SHA-256

Answer: D

NEW QUESTION 2
How many report templates does the Cisco Firepower Management Center support?

• A. 20
• B. 10
• C. 5
• D. unlimited

Answer: D

NEW QUESTION 3
What is the maximum bit size that Cisco FMC supports for HTTPS certificates?

• A. 1024
• B. 8192
• C. 4096
• D. 2048

Answer: D

NEW QUESTION 4
Which interface type allows packets to be dropped?

• A. passive
• B. inline
• C. ERSPAN
• D. TAP

Answer: B

NEW QUESTION 5
A network engineer is configuring URL Filtering on Firepower Threat Defense. Which two port requirements on the Firepower Management Center must be validated to allow communication with the cloud service? (Choose two.)

• A. outbound port TCP/443
• B. inbound port TCP/80
• C. outbound port TCP/8080
• D. inbound port TCP/443
• E. outbound port TCP/80

Answer: AE

NEW QUESTION 6
In which two places can thresholding settings be configured? (Choose two.)

• A. on each IPS rule
• B. globally, within the network analysis policy
• C. globally, per intrusion policy
• D. on each access control rule
• E. per preprocessor, within the network analysis policy

Answer: AC

NEW QUESTION 7
Which protocol establishes network redundancy in a switched Firepower device deployment?

• A. STP
• B. HSRP
• C. GLBP
• D. VRRP

Answer: A

NEW QUESTION 8
On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?

• A. transparent inline mode
• B. TAP mode
• C. strict TCP enforcement
• D. propagate link state

Answer: D

NEW QUESTION 9
When do you need the file-size command option during troubleshooting with packet capture?

• A. when capture packets are less than 16 MB
• B. when capture packets are restricted from the secondary memory
• C. when capture packets exceed 10 GB
• D. when capture packets exceed 32 MB

Answer: D

NEW QUESTION 10
What is a result of enabling Cisco FTD clustering?

• A. For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections.
• B. Integrated Routing and Bridging is supported on the master unit.
• C. Site-to-site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails.
• D. All Firepower appliances can support Cisco FTD clustering.

Answer: C

NEW QUESTION 11
Which action should be taken after editing an object that is used inside an access control policy?

• A. Delete the existing object in use.
• B. Refresh the Cisco FMC GUI for the access control policy.
• C. Redeploy the updated configuration.
• D. Create another rule using a different object name.

Answer: C

NEW QUESTION 12
Which report template field format is available in Cisco FMC?

• A. box lever chart
• B. arrow chart
• C. bar chart
• D. benchmark chart

Answer: C

NEW QUESTION 13
When creating a report template, how can the results be limited to show only the activity of a specific subnet?

• A. Create a custom search in Firepower Management Center and select it in each section of the report.
• B. Add an Input Parameter in the Advanced Settings of the report, and set the type to Network/IP.
• C. Add a Table View section to the report with the Search field defined as the network in CIDR format.
• D. Select IP Address as the X-Axis in each section of the report.

Answer: B

NEW QUESTION 14
Which command is entered in the Cisco FMC CLI to generate a troubleshooting file?

• A. show running-config
• B. show tech-support chassis
• C. system support diagnostic-cli
• D. sudo sf_troubleshoot.pl

Answer: D

Explanation:
41 Which CLI command is used to control special handling of ClientHello messages?
A. system support ssl-client-hello-tuning
B. system support ssl-client-hello-display
C. system support ssl-client-hello-force-reset
D. system support ssl-client-hello-enabled

NEW QUESTION 15
In a Cisco AMP for Networks deployment, which disposition is returned if the cloud cannot be reached?

• A. unavailable
• B. unknown
• C. clean
• D. disconnected

Answer: A

NEW QUESTION 16
What is the difference between inline and inline tap on Cisco Firepower?

• A. Inline tap mode can send a copy of the traffic to another device.
• B. Inline tap mode does full packet capture.
• C. Inline mode cannot do SSL decryption.
• D. Inline mode can drop malicious traffic.

Answer: D

NEW QUESTION 17
Which two deployment types support high availability? (Choose two.)

• A. transparent
• B. routed
• C. clustered
• D. intra-chassis multi-instance
• E. virtual appliance in public cloud

Answer: AB

NEW QUESTION 18
Which policy rule is included in the deployment of a local DMZ during the initial deployment of a Cisco NGFW through the Cisco FMC GUI?

• A. a default DMZ policy for which only a user can change the IP addresses.
• B. deny ip any
• C. no policy rule is included
• D. permit ip any

Answer: C

NEW QUESTION 19
Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)

• A. The units must be the same version
• B. Both devices can be part of a different group that must be in the same domain when configured within the FMC.
• C. The units must be different models if they are part of the same series.
• D. The units must be configured only for firewall routed mode.
• E. The units must be the same model.

Answer: AE

NEW QUESTION 20
Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD? (Choose two.)

• A. OSPFv2 with IPv6 capabilities
• B. virtual links
• C. SHA authentication to OSPF packets
• D. area boundary router type 1 LSA filtering
• E. MD5 authentication to OSPF packets

Answer: BD

NEW QUESTION 21
What is the benefit of selecting the trace option for packet capture?

• A. The option indicates whether the packet was dropped or successful.
• B. The option indicated whether the destination host responds through a different path.
• C. The option limits the number of packets that are captured.
• D. The option captures details of each packet.

Answer: C

NEW QUESTION 22
......