Securing Networks with Cisco Firepower (300-710) Free Practice Test

Question 1

An engineer is reviewing an existing custom server fingerprint on a Cisco Secure Firewall because the current information is inaccurate. Which action must the engineer take to improve the accuracy of the network discovery rules?

A. Exclude the IP address that is used to communicate with the monitored host.

B. Add NetFlow monitoring for the network segment.

C. Exclude the ports that must be skipped.

D. Set one common rule to override the reports in the multidomain environment.

Correct Answer: A

Question 2

A security administrator must configure Cisco Secure Firewall Management Center so that certain intrusion rules are active only during specified times. Which action must the administrator take?

A. Create time-based access control rules that apply the intrusion policy at the scheduled intervals.

B. Configure a time-based trigger in the intrusion policy to enable the rules at defined times.

C. Create a scheduled task that activates and deactivates the intrusion rules at the required times.

D. Assign a time range directly to every intrusion rule in the intrusion policy.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which firewall design allows a firewall to forward traffic at layer 2 and layer 3 for the same subnet?

A. Cisco Firepower Threat Defense mode

B. integrated routing and bridging

C. transparent mode

D. routed mode

Correct Answer: C

Question 4

How does Cisco Secure Cloud Analytics handle information about network traffic?

A. It performs behavioral analysis on events and network-flow data.

B. It forwards the information to other devices without storing it.

C. It stores the information in a database without performing any analysis.

D. It performs heuristic analysis on events and network-flow data.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which action must be taken to configure an isolated bridge group for IRB mode on a Cisco Secure Firewall device?

A. Define the NAT pool for the blocked traffic.

B. Remove the route from the routing table.

C. Add the restricted segment to the ACL.

D. Leave BVI interface name empty.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

An engineer must implement Cisco Secure Firewall transparent mode due to a new server recently being added that must communicate with an existing server that is currently separated by the firewall. Which implementation action must be taken next by the engineer to accomplish the goal?

A. Assign the same subnet to both servers.

B. Enable both servers to share the same VXLAN segment.

C. Configure the same default gateway for both servers.

D. Ensure that both servers are in the same bridge domain.

Correct Answer: D

Question 7

A security engineer must create a malware and file policy on a Cisco Secure Firewall Threat Defense device.
The solution must ensure that PDF. DOCX, and XLSX files are not sent lo Cisco Secure Malware analytics.
What must do configured to meet the requirements ' '

A. capacity handling

B. Spero analysis

C. local malware analysis

D. dynamic analysis

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Which command is run at the CLI when logged in to an FTD unit, to determine whether the unit is managed locally or by a remote FMC server?

A. show managers

B. show configuration session

C. show running-config | include manager

D. system generate-troubleshoot

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

An administrator is working on a migration from Cisco ASA to the Cisco FTD appliance and needs to test the rules without disrupting the traffic. Which policy type should be used to configure the ASA rules during this phase of the migration?

A. Prefilter

B. Access Control

C. Intrusion

D. identity

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

An engineer must configure high availability on two Cisco Secure Firewall Threat Defense appliances. Drag and drop the configuration steps from the left into the sequence on the right.

Correct Answer:

Explanation:
Step 1(Configure the primary unit for high availability),
Step 2(Configure the secondary unit for high availability),
Step 3(Configure the two units for high availability),
Step 4(Configure failover criteria for health monitoring)

Question 11

A network administrator registered a new FTD to an existing FMC. The administrator cannot place the FTD in transparent mode. Which action enables transparent mode?

A. Dereglster the FTD device from FMC and configure transparent mode via the CLI.

B. Add a Bridge Group Interface to the FTD before transparent mode is configured.

C. Obtain an FTD model that supports transparent mode.

D. Assign an IP address to two physical interfaces.

Correct Answer: A

Welcome to TestSimulate

Cisco Securing Networks with Cisco Firepower (300-710) Free Practice Test