Cisco CCNP Security 300-710 Questions & Answers

• Question 301:

  Which description of a correlation, policy configuration in the Cisco Firepower Management Center, is true?

  A. Correlation policy priorities override whitelist priorities.

  B. The system displays correlation policies that are created on all of the domains in a multidomain deployment.

  C. You cannot add a host profile qualification to a correlation rule that is triggered by a malware event.

  D. Deleting a response group deletes the responses of that group.

  Correct Answer: C

• Question 302:

  Which two TCP ports can allow the Cisco Firepower Management Center to communication with FireAMP cloud for file disposition information? (Choose two.)

  A. 8080

  B. 22

  C. 8305

  D. 32137

  E. 443

  Correct Answer: DE

• Question 303:

  Which function is the primary function of Cisco AMP threat Grid?

  A. automated email encryption

  B. applying a real-time URI blacklist

  C. automated malware analysis

  D. monitoring network traffic

  Correct Answer: C

• Question 304:

  Which function is the primary function of Cisco AMP threat Grid?

  A. flood attack detection.

  B. secure boot

  C. image signing

  D. DDoS mitigation

  E. SYN flood detection

  Correct Answer: BC

• Question 305:

  Which function is the primary function of Cisco AMP threat Grid?

  A. It analyzes copies of packets from the packet flow

  B. The device is deployed in a passive configuration

  C. If a rule is triggered the device generates an intrusion event.

  D. The packet flow traverses the device

  E. If a rule is triggered the device drops the packet

  Correct Answer: AC

• Question 306:

  When using Cisco AMP for Networks, which feature copies a file to the Cisco AMP cloud for analysis?

  A. Spero analysis

  B. dynamic analysis

  C. sandbox analysis

  D. malware analysis

  Correct Answer: A

  https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Reference_a_wrapper_Chapter_topic_here.html#concept_75BFE5A73EFB4216A109922D991FFD34

• Question 307:

  Which description of a correlation policy configuration in the Cisco Firepower Management Center is true?

  A. The system displays correlation policies that are created on all of the domains in a multidomain deployment

  B. Deleting a response group deletes the responses of that group

  C. You cannot add a host profile qualification to a correlation rule that is triggered by a malware event

  D. Correlation policy priorities override whitelist priorities

  Correct Answer: C

• Question 308:

  What are 2 types or forms of suppression on a FirePower policy (or FTD)?

  A. source

  B. port

  C. rule

  D. protocol

  E. application

  Correct Answer: AC

• Question 309:

  Which two dynamic routing protocols are supported in FirePower Threat Defense v6.0? (Choose Two)

  A. IS-IS

  B. BGP

  C. OSPF

  D. static routing

  E. EIGRP

  Correct Answer: BC

• Question 310:

  With Cisco Firepower Threat Defense software, which interface mode do you configure for an IPS deployment, where traffic passes through the appliance but does not require VLAN rewriting?

  A. inline set

  B. passive

  C. inline tap

  D. routed

  E. transparent

  Correct Answer: A

  The key phrase here are

  "Which interface mode" "does not require VLAN rewriting"

  Routed and Transparent mode are firewall mode, not interface mode.