700-270 Exam Questions
70 real 700-270 exam questions with expert-verified answers and explanations. Page 2 of 2.
- Question #51Understanding Next-Generation Firewall Technology and Concepts
Which two high-availability deployment modes support FirePOWER services? (Choose two.)
High AvailabilityFirePOWER ServicesDeployment ModesHA Clustering - Question #52Designing Basic Cisco NGFW Solutions
Which FireSIGHT Management Center appliance is required to support up to 100 managed devices?
FireSIGHT Management CenterManaged device capacityAppliance specificationsNGFW infrastructure - Question #53Understanding Next-Generation Firewall Technology and Concepts
Which activity leads to better network visibility?
network visibilityuser contextevent enrichmentNGFW capabilities - Question #54Designing Basic Cisco NGFW Solutions
What is the maximum number of Cisco ASA 5585-X appliances that are supported in a cluster?
ASA 5585-X specificationsASA clusteringHigh availabilityCluster configuration limits - Question #55Understanding Next-Generation Firewall Technology and Concepts
With which hardware option must Cisco ASA models below the 5585-X be sold to support FirePOWER services?
ASA FirePOWERSSP moduleNGFW hardwareSecurity services - Question #56Understanding Next-Generation Firewall Technology and Concepts
Which three FirePOWER services features require a subscription license? (Choose three.)
FirePOWER licensingIPSURL filteringAMP - Question #57Understanding Next-Generation Firewall Technology and Concepts
Detection of an exploit kit that is installed on a device is an example of which loC event category?
IPSexploit kit detectionmalware signaturesLoC events - Question #58Understanding Next-Generation Firewall Technology and Concepts
Which performance factor is most relevant to traffic that is destined to a data center'?
data-center-trafficinternet-edgenetwork-performancetraffic-classification - Question #59Understanding Next-Generation Firewall Technology and Concepts
Which FirePOWER services deployment mode is recommended for customer evaluations?
FirePOWER deployment modesMonitor-Only evaluationIDS vs InlineNGFW deployment strategy - Question #60Understanding Next-Generation Firewall Technology and Concepts
How is traffic forwarded from the Cisco ASA to the FirePOWER services module for analysis?
ASA-SFR ArchitectureService PoliciesFirePOWER IntegrationTraffic Forwarding - Question #61Positioning Cisco NGFW Solutions
Which standout capabilities of FirePOWER services are not available in other next- generation firewall solutions?
FirePOWER ServicesFile Trajectory & RetrospectionNGFW DifferentiationAdvanced Threat Protection - Question #62Understanding Next-Generation Firewall Technology and Concepts
In a stateful firewall application, inspection occurs at which layer of the OSI model?
Stateful FirewallOSI Layer 7Application Layer InspectionDeep Packet Inspection - Question #63Identifying Customer Business Challenges and Opportunities
Which statement is true when describing the current threat landscape?
Threat landscapeMalicious domainsModern threatsAttack surface - Question #64Understanding Next-Generation Firewall Technology and Concepts
Which statement is true regarding the security of IPv6?
IPv6 tunnelingfirewall inspection bypassIPv4/IPv6 coexistencesecurity implications - Question #65Designing Basic Cisco NGFW Solutions
Which option represents an indirect system-performance impact by location?
physical device placementsystem performanceindirect impactinfrastructure design - Question #66Understanding Next-Generation Firewall Technology and Concepts
Which FirePOWER services feature is associated with FireSIGHT recommendations that may be automatically applied as policy?
Advanced Malware Protection (AMP)FireSIGHT Management PlatformFirePOWER ServicesAutomatic Policy Recommendations - Question #67Understanding Next-Generation Firewall Technology and Concepts
When deploying the Cisco ASA with the FirePOWER services module, which two functions are performed by the FirePOWER services module? (Choose two)
FirePOWER ModuleApplication Visibility ControlFile Type FilteringNGFW Capabilities - Question #68Understanding Next-Generation Firewall Technology and Concepts
Which option is an attribute of a day-zero attack?
zero-day attacksthreat intelligencecontextual awarenessNGFW defense - Question #69Understanding Next-Generation Firewall Technology and Concepts
Connections to known CnC sites are an example of which loC event category?
Command and Control (CnC)IPS DetectionThreat IntelligenceNGFW Security - Question #70Identifying Customer Business Challenges and Opportunities
What is a major challenge in the retail market?
retail securitypayment data protectionPCI DSSdata security