700-270 Exam Questions
70 real 700-270 exam questions with expert-verified answers and explanations. Page 1 of 2.
- Question #1Understanding Next-Generation Firewall Technology and Concepts
Which product supports the FirePOWER services hardware module?
ASA Hardware ModulesFirePOWER ServicesProduct SpecificationsASA Models - Question #2Designing Basic Cisco NGFW Solutions
Which two deployment options are available for FireSIGHT Management Center? (Choose two )
FireSIGHT Management CenterDeployment ModelsManagement InfrastructureNGFW Architecture - Question #3Understanding Next-Generation Firewall Technology and Concepts
Stateful firewalls are an example of which type of security method?
Stateful FirewallsMitigationSecurity MethodsNetwork Security - Question #4Understanding Next-Generation Firewall Technology and Concepts
When deploying the Cisco ASA with FirePOWER services module, which two functions are performed by the Cisco ASA? (Choose two.)
Cisco ASAFirePOWER moduleNATTCP intercept - Question #5Positioning Cisco NGFW Solutions
Which subscription license terms are available for FirePOWER services features?
FirePOWER LicensingSubscription TermsLicense ManagementPricing Models - Question #6Articulating the Value and Benefits of Cisco NGFW
What is the advantage of leveraging an external intelligence source for security policy?
Threat IntelligenceReal-time AnalyticsSecurity PolicyDynamic Detection - Question #7Understanding Next-Generation Firewall Technology and Concepts
Which mode of IPS deployment enforces blocking actions on malicious traffic?
IPS Deployment ModesInline ModeActive Threat PreventionNetwork Enforcement - Question #8Identifying Customer Business Challenges and Opportunities
What are the three main drivers for changing operations? (Choose three.)
Operational change driversBusiness strategyMarket competitionStrategic factors - Question #9Identifying Customer Business Challenges and Opportunities
What are two common requirements of most tasks in business processes? (Choose two.)
business processescollaborationinteractionorganizational requirements - Question #10Identifying Customer Business Challenges and Opportunities
Which two statements best describe the challenges that customers encounter when providing services in a borderless world? (Choose two.)
borderless networkscloud securitysecurity managementbusiness drivers - Question #11Understanding Next-Generation Firewall Technology and Concepts
Which Cisco ASA model provides integrated wireless access-point capabilities that are ideal for branch offices'?
ASA model variantsIntegrated wireless APBranch office deploymentNGFW appliances - Question #12Understanding Next-Generation Firewall Technology and Concepts
NGIPS rulesets are configured using which management application?
NGIPS configurationFireSIGHT Management CenterNGFW management toolsRuleset management - Question #13Understanding Next-Generation Firewall Technology and Concepts
What is the minimum Cisco ASA software version that is required to support FirePOWER services?
ASA software versionsFirePOWER servicesNGFW requirementsversion compatibility - Question #14Understanding Next-Generation Firewall Technology and Concepts
Which FirePOWER services capability supports seamless processing after an adaptive security appliance stateful failover event?
midsession pickupASA failoverstateful redundancysession continuity - Question #15Articulating the Value and Benefits of Cisco NGFW
What does the NSS Labs Next Generation Firewall Security Value Map measure?
NSS Labs evaluationsecurity effectiveness vs TCONGFW ROI metricsvalue measurement - Question #16Understanding Next-Generation Firewall Technology and Concepts
Which enhancement is added to URL filtering that is performed by the FirePOWER services module?
URL filteringFirePOWER servicesreputation scoringNGFW capabilities - Question #17Understanding Next-Generation Firewall Technology and Concepts
Which three features are considered next-generation firewall capabilities? (Choose three)
NGFW CapabilitiesApplication Visibility and ControlFirewall FeaturesNetwork Security - Question #18Articulating the Value and Benefits of Cisco NGFW
Which two guidelines are important when showing proof of value using Cisco dCloud? (Choose two.)
Proof of Value (PoV) demonstrationsdCloud hands-on labsCustomer value communicationSales presentation best practices - Question #19Understanding Next-Generation Firewall Technology and Concepts
Where are files that are awaiting a disposition check held during file analysis?
File AnalysisCloud SandboxThreat DetectionDisposition Determination - Question #20Understanding Next-Generation Firewall Technology and Concepts
Which application is required to support adding user information from Microsoft Active Directory to FirePOWER events?
Active Directory IntegrationFirePOWER EventsUser IdentitySourcefire Agent - Question #21Understanding Next-Generation Firewall Technology and Concepts
Which management application can be deployed as a physical or virtual appliance to configure security policy for the FirePOWER services module?
FirePOWER ManagementFireSIGHT Management CenterAppliance DeploymentSecurity Policy Configuration - Question #22Understanding Next-Generation Firewall Technology and Concepts
Which FirePOWER services feature is included by default with the base software?
FirePOWER servicesAVCbase software featuresNGFW defaults - Question #23Understanding Next-Generation Firewall Technology and Concepts
A file that was previously marked as "clean" has its disposition changed to "malware " Which FirePOWER feature license is required to enable analysis of the file propagation path w...
Advanced Malware Protection (AMP)File ReputationFirePOWER LicensingMalware Analysis - Question #24Designing Basic Cisco NGFW Solutions
A customer wants to implement FirePOWER services with AVC and IPS on its Cisco ASA 5515- X. This device is currently deployed with a legacy IPS module. Which three steps may be req...
Cisco ASA 5515-XFirePOWER ServicesIPS Module MigrationAVC Licensing - Question #25Understanding Next-Generation Firewall Technology and Concepts
A customer wants to block instant-messaging traffic within Facebook Chat for its employees. Which feature licensing option provides this capability'?
AVCApplication ControlTraffic FilteringFeature Licensing - Question #26Understanding Next-Generation Firewall Technology and Concepts
Which security technique should be implemented to remediate after a threat is discovered?
Threat RemediationIncident ResponsePost-Incident AnalysisSecurity Operations - Question #27Understanding Next-Generation Firewall Technology and Concepts
Which two options are objectives that are defined as part of the "before" stage of the attack continuum? {Choose two.)
Attack ContinuumPreventionHardeningEnforcement - Question #28Understanding Next-Generation Firewall Technology and Concepts
Which ruleset is used to define FirePOWER services NGIPS policies?
Snort rulesetFirePOWER servicesNGIPS policiesIPS engine - Question #29Understanding Next-Generation Firewall Technology and Concepts
Which method of discovery is used during impact assessment?
Discovery MethodsImpact AssessmentInline InspectionNetwork Monitoring - Question #30Positioning Cisco NGFW Solutions
Cisco FirePOWER services has been extended to which SMB-focused product?
Cisco FirePOWER servicesASA 5506-X specificationsSMB firewall solutionsNGFW product portfolio - Question #31Understanding Next-Generation Firewall Technology and Concepts
Which impact flag indicates that action is to be taken immediately?
Impact FlagsNGFW ConfigurationAction PriorityThreat Response - Question #32Identifying Customer Business Challenges and Opportunities
What are two security challenges of the distributed edge? (Choose two.)
Edge Computing SecurityDevice VisibilityUser AwarenessDistributed Networks - Question #33Sales Process and Resources
Which of these is not a key point when selling security solutions?
Sales ProcessCustomer EngagementMarket AwarenessBusiness Focus - Question #34Articulating the Value and Benefits of Cisco NGFW
What are three important components of a business plan? (Choose three.)
business plan componentstechnical solution designKPIs and business impactvalue proposition - Question #35Understanding Next-Generation Firewall Technology and Concepts
Which security feature can be applied in the "after" stage of the attack continuum'?
attack continuumadvanced malware protectiondefense stagesincident response - Question #36Positioning Cisco NGFW Solutions
Which three options are important when positioning a next-generation firewall solution? (Choose three.)
NGFW positioningperformance and stabilityevasion preventionsolution differentiation - Question #37Understanding Next-Generation Firewall Technology and Concepts
A file-type embedded attack is an example of which loC event category?
file-type embedded attacksecurity intelligenceLoC event categorizationthreat classification - Question #38Identifying Customer Business Challenges and Opportunities
What are two challenges that are faced by traditional defense-in-depth security solutions? (Choose two.)
Defense-in-depth limitationsVendor lock-inSecurity logging and visibilityTraditional security architecture - Question #39Understanding Next-Generation Firewall Technology and Concepts
Which two network visibility categories are supported by FirePOWER services beyond a typical next-generation firewall solution? (Choose two.)
FirePOWER visibilityApplication identificationUser identificationNGFW capabilities - Question #40Articulating the Value and Benefits of Cisco NGFW
Which two statements are true regarding Cisco leadership in security technologies? (Choose two.)
Cisco market leadershipEnterprise security revenueGartner evaluationsCompetitive positioning - Question #41Understanding Next-Generation Firewall Technology and Concepts
Which product provides zone-based and policy-driven security via a virtual firewall?
Virtual FirewallZone-Based SecurityPolicy-Driven SecurityCisco VSG - Question #42Understanding Next-Generation Firewall Technology and Concepts
Which option best describes the role of an loC?
Indicator of CompromiseHost Infection DetectionThreat DetectionMalware Indicators - Question #43Articulating the Value and Benefits of Cisco NGFW
What are two benefits that are provided by file trajectory services? (Choose two)
file trajectory servicesmalware analysisthreat propagationattack investigation - Question #44Understanding Next-Generation Firewall Technology and Concepts
What is the level of granularity that is supported by application visibility and control?
Application Visibility and ControlPort-Level FilteringNGFW CapabilitiesFiltering Granularity - Question #45Designing Basic Cisco NGFW Solutions
Which recommendation should be made to increase scalability, performance, and resiliency?
ASA ClusteringHigh AvailabilityScalabilityFailover vs Clustering - Question #46Understanding Next-Generation Firewall Technology and Concepts
Which AMP feature provides continuous analysis capabilities?
Advanced Malware ProtectionRetrospectionContinuous analysisThreat detection - Question #47Understanding Next-Generation Firewall Technology and Concepts
File trajectory services are configured using which management application?
File Trajectory ServicesFireSIGHT ManagementNGFW ManagementConfiguration Tools - Question #48Understanding Next-Generation Firewall Technology and Concepts
Which version of AMP is available on the Cisco ASA with FirePOWER services module?
AMP for NetworksASA FirePOWERMalware ProtectionNGFW Components - Question #49Sales Process and Resources
What are the two requirements for conducting a customer on-site evaluation? (Choose two.)
on-site evaluationFirePOWER monitoringCisco dCloudcustomer assessment - Question #50Sales Process and Resources
Which type of Cisco services offering is aimed at helping customers to plan and upgrade new FirePOWER deployments?
Cisco Migration ServicesFirePOWER deployment planningServices offeringsUpgrade planning