Cisco CCNP Security 300-710 Questions & Answers

• Question 181:

  A Cisco FTD has two physical interfaces assigned to a BVI. Each interface is connected to a different VLAN on the same switch.

  Which firewall mode is the Cisco FTD set up to support?

  A. active/active failover

  B. transparent

  C. routed

  D. high availability clustering

  Correct Answer: C

• Question 182:

  An engineer is configuring Cisco FMC and wants to limit the time allowed for processing packets through the interface. However, if the time is exceeded, the configuration must allow packets to bypass detection. What must be configured on the Cisco FMC to accomplish this task?

  A. Cisco ISE Security Group Tag

  B. Automatic Application Bypass

  C. Inspect Local Traffic Bypass

  D. Fast-Path Rules Bypass

  Correct Answer: B

• Question 183:

  A network engineer sets up a secondary Cisco FMC that is integrated with Cisco Security Packet Analyzer. What occurs when the secondary Cisco FMC synchronizes with the primary Cisco FMC?

  A. The existing configuration for integration of the secondary Cisco FMC the Cisco Security Packet Analyzer is overwritten.

  B. The synchronization between the primary and secondary Cisco FMC fails.

  C. The existing integration configuration is replicated to the primary Cisco FMC.

  D. The secondary Cisco FMC must be reintegrated with the Cisco Security Packet Analyzer after the synchronization.

  Correct Answer: A

• Question 184:

  A network engineer is tasked with minimizing traffic interruption during peak traffic times. When the SNORT inspection engine is overwhelmed, what must be configured to alleviate this issue?

  A. Enable IPS inline link state propagation

  B. Enable Pre-filter policies before the SNORT engine failure

  C. Set a Trust ALL access control policy

  D. Enable Automatic Application Bypass

  Correct Answer: D

• Question 185:

  A network security engineer must export packet captures from the Cisco FMC web browser while troubleshooting an issue. When navigating to the address https:///capture/CAPI/pcap/test.pcap, an error 403: Forbidden is given instead of the PCAP file. Which action must the engineer take to resolve this issue?

  A. Disable the proxy setting on the browser

  B. Use the Cisco FTD IP address as the proxy server setting on the browser.

  C. Disable the HTTPS server and use HTTP instead

  D. Enable the HTTPS server for the device platform policy

  Correct Answer: D

• Question 186:

  A security engineer is configuring a remote Cisco FTD that has limited resources and internet bandwidth.

  Which malware action and protection option should be configured to reduce the requirement for cloud lookups?

  A. Malware Cloud Lookup and dynamic analysis

  B. Block Malware action and dynamic analysis

  C. Block Malware action and local malware analysis

  D. Block File action and local malware analysis

  Correct Answer: C

• Question 187:

  While integrating Cisco Umbrella with Cisco Threat Response, a network security engineer wants to automatically push blocking of domains from the Cisco Threat Response interface to Cisco Umbrella.

  Which API meets this requirement?

  A. investigate

  B. reporting

  C. enforcement

  D. REST

  Correct Answer: C

• Question 188:

  An engineer is reviewing a ticket that requests to allow traffic for some devices that must connect to a server over 8699/udp. The request mentions only one IP address, 172.16.18.15, but the requestor asked for the engineer to open the port for all machines that have been trying to connect to it over the last week.

  Which action must the engineer take to troubleshoot this issue?

  A. Use the context explorer to see the application blocks by protocol.

  B. Use the context explorer to see the destination port blocks

  C. Filter the connection events by the source port 8699/udp.

  D. Filter the connection events by the destination port 8699/udp.

  Correct Answer: D

• Question 189:

  A network administrator is concerned about the high number of malware files affecting users' machines. What must be done within the access control policy in Cisco FMC to address this concern?

  A. Create an intrusion policy and set the access control policy to block

  B. Create an intrusion policy and set the access control policy to allow

  C. Create a file policy and set the access control policy to allow

  D. Create a file policy and set the access control policy to block

  Correct Answer: C

• Question 190:

  An engineer must configure a Cisco FMC dashboard in a child domain. Which action must be taken so that the dashboard is visible to the parent domain?

  A. Adjust policy inheritance settings

  B. Add a separate widget

  C. Create a copy of the dashboard

  D. Add a separate tab

  Correct Answer: C