Practice 300-710 Exam Online

Question 1

In which two places are thresholding settings configured? (Choose two.)

A : on each IPS rule

B : globally, within the network analysis policy

C : globally, per intrusion policy

D : on each access control rule

E : per preprocessor, within the network analysis policy

Answer: A,C

Question 2

An administrator needs to configure Cisco FMC to send a notification email when a data transfer larger than 10 MB is initiated from an internal host outside of standard business hours. Which Cisco FMC feature must be configured to accomplish this task?

A : file and malware policy

B : application detector

C : intrusion policy

D : correlation policy

Answer: A

Question 3

An engineer is tasked with deploying an internal perimeter firewall that will support multiple DMZs Each DMZ has a unique private IP subnet range. How is this requirement satisfied?

A : Deploy the firewall in transparent mode with access control policies.

B : Deploy the firewall in routed mode with access control policies.

C : Deploy the firewall in routed mode with NAT configured.

D : Deploy the firewall in transparent mode with NAT configured.

Answer: C

Question 4

An administrator is configuring the interface of a Cisco Secure Firewall Threat Defense firewall device in a passive IPS deployment. The device and interface have been identified. Which set of configuration steps must the administrator perform next to complete the implementation?

A : Set the interface mode to passive. Associate the interface with a security zone. Enable the interface. Set the MTU parameter.

B : Modify the interface to retransmit received traffic. Associate the interface with a security zone Set the MTU parameter

C : Set the interface mode to passive. Associate the interface with a security zone. Set the MTU parameter. Reset the interface.

D : Modify the interface to retransmit received traffic. Associate the interface with a security zone. Enable the interface. Set the MTU parameter.

Answer: A

Question 5

An engineer plans to reconfigure an existing Cisco FTD from transparent mode to routed mode. Which additional action must be taken to maintain communication Between me two network segments?

A : Configure a NAT rule so mat traffic between the segments is exempt from NAT.

B : Update the IP addressing so that each segment is a unique IP subnet.

C : Deploy inbound ACLs on each interface to allow traffic between the segments.

D : Assign a unique VLAN ID for the interface in each segment.

Answer: B

Name:	Securing Networks with Cisco Firepower
Exam Code:	300-710
Certification:	CCNP Security
Vendor:	Cisco
Total Questions:	330
Last Updated:	Apr 25, 2024

Cisco 300-710