300-710 Exam Questions

Which Cisco Firepower rule action displays an HTTP warning page?

What is the result of specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?

Which Firepower feature allows users to configure bridges in routed mode and enables devices to perform Layer 2 switching between interfaces?

In which two places can thresholding settings be configured? (Choose two.)

In which two ways do access control policies operate on a Cisco Firepower system? (Choose two.)

Which function is the primary function of Cisco AMP threat Grid?

Which two feature does Cisco Trust Anchor support? (Choose two.)

Which two types of objects are reusable and supported by Cisco FMC? (Choose two.)

What is the benefit of selecting the trace option for packet capture?

After deploying a network-monitoring tool to manage and monitor networking devices in your organization, you realize that you need to manually upload an MIB for the Cisco FMC. In w...

Which command is run at the CLI when logged in to an FTD unit, to determine whether the unit is managed locally or by a remote FMC server?

Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?

How many report templates does the Cisco Firepower Management Center support?

Which action should be taken after editing an object that is used inside an access control policy?

Which two characteristics represent a Cisco device operating in tap mode? (Choose two.)

When using Cisco AMP for Networks, which feature copies a file to the Cisco AMP cloud for analysis?

Which Cisco Firepower feature is used to reduce the number of events received in a period of time?

Which report template field format is available in Cisco FMC?

Which group within Cisco does the Threat Response team use for threat analysis and research?

Which CLI command is used to generate firewall debug messages on a Cisco Firepower?

Which command-line mode is supported from the Cisco Firepower Management Center CLI?

Which command is entered in the Cisco FMC CLI to generate a troubleshooting file?

While configuring FTD, a network engineer wants to ensure that traffic passing through the appliance does not require routing or Vlan rewriting. Which interface mode should the eng...

With Cisco FTD integrated routing and bridging, which interface does the bridge group use to communicate with a routed interface?

A network engineer is extending a user segment through an FTD device for traffic inspection without creating another IP subnet. How is this accomplished on an FTD device in routed...

Refer to the exhibit. And engineer is analyzing the Attacks Risk Report and finds that there are over 300 instances of new operating systems being seen on the network. How is the F...

A security engineer is configuring an Access Control Policy for multiple branch locations. These locations share a common rule set and utilize a network object called INSIDE_NET wh...

An administrator is working on a migration from Cisco ASA to the Cisco FTD appliance and needs to test the rules without disrupting the traffic. Which policy type should be used to...

An engineer currently has a Cisco FTD device registered to the Cisco FMC and is assigned the address of 10 10.50.12. The organization is upgrading the addressing schemes and there...

After using Firepower for some time and learning about how it interacts with the network, an administrator is trying to correlate malicious activity with a user. Which widget shoul...

An administrator is attempting to remotely log into a switch in the data centre using SSH and is unable to connect. How does the administrator confirm that traffic is reaching the...

An engineer is configuring a second Cisco FMC as a standby device but is unable to register with the active unit. What is causing this issue?

The event dashboard within the Cisco FMC has been inundated with low priority intrusion drop events, which are overshadowing high priority events. An engineer has been tasked with...

An engineer is implementing Cisco FTD in the network and is determining which Firepower mode to use. The organization needs to have multiple virtual Firepower devices working separ...

Which two considerations must be made when deleting and re-adding devices while managing them via Cisco FMC? (Choose two).

An engineer is configuring a cisco FTD appliance in IPS-only mode and needs to utilize fail-to- wire interfaces. Which interface mode should be used to meet these requirements?

An engineer is troubleshooting application failures through a FTD deployment. While using the FMC CLI. it has been determined that the traffic in question is not matching the desir...

What is the advantage of having Cisco Firepower devices send events to Cisco Threat response via the security services exchange portal directly as opposed to using syslog?

An engineer has been asked to show application usages automatically on a monthly basis and send the information to management. What mechanism should be used to accomplish this task...

An organization has noticed that malware was downloaded from a website that does not currently have a known bad reputation. How will this issue be addresses globally in the quickes...

An engineer is setting up a new Firepower deployment and is looking at the default FMC policies to start the implementation. During the initial trial phase, the organization wants...

An organization has implemented Cisco Firepower without IPS capabilities and now wants to enable inspection for their traffic. They need to be able to detect protocol anomalies and...

A hospital network needs to upgrade their Cisco FMC managed devices and needs to ensure that a disaster recovery process is in place. What must be done in order to minimize downtim...

An engineer is monitoring network traffic from their sales and product development departments, which are on two separate networks. What must be configured in order to maintain dat...

With Cisco FTD software, which interface mode must be configured to passively receive traffic that passes through the appliance?

A Cisco FTD device is running in transparent firewall mode with a VTEP bridge group member ingress interface. What must be considered by an engineer tasked with specifying a destin...

What is a characteristic of bridge groups on a Cisco FTD?

Network traffic coining from an organization's CEO must never be denied. Which access control policy configuration option should be used if the deployment engineer is not permitted...

An organization has a compliancy requirement to protect servers from clients, however, the clients and servers all reside on the same Layer 3 network. Without readdressing IP subne...

In a multi-tenant deployment where multiple domains are in use. Which update should be applied outside of the Global Domain?