nerdexam
CiscoCisco

300-710 · Question #169

300-710 Question #169: Real Exam Question with Answer & Explanation

Sign in or unlock 300-710 to reveal the answer and full explanation for question #169. The question stem and answer options stay visible for context.

Management and Troubleshooting

Question

An engineer is troubleshooting connectivity to the DNS servers from hosts behind a new Cisco FTD device. The hosts cannot send DNS queries to servers in the DMZ. Which action should the engineer take to troubleshoot this issue using the real DNS packets?

Options

  • AUse the packet capture tool to check where the traffic is being blocked and adjust the access
  • BUse the Connection Events dashboard to check the block reason and adjust the inspection policy
  • CUse the packet tracer tool to determine at which hop the packet is being dropped
  • DUse the show blocks command in the Threat Defense CLI tool and create a policy to allow the

Unlock 300-710 to see the answer

You've previewed enough free 300-710 questions. Unlock 300-710 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#FTD Troubleshooting#Packet Capture#DNS Connectivity#Access Control
Full 300-710 PracticeBrowse All 300-710 Questions