Cisco CCNP Security 300-710 Questions & Answers

• Question 311:

  What Software can be installed on the Cisco 4100 series appliance? (Choose two)

  A. FTD

  B. ASA

  C. ASAv

  D. FMC

  Correct Answer: AB

• Question 312:

  Which two field can be used to create a new email alert within the Cisco Firepower Management center under Policies > Actions > Alerts tab? (Choose two.)

  A. Device

  B. Source

  C. Destination

  D. From

  E. Relay Host

  Correct Answer: DE

• Question 313:

  Which connector is used to integrate Cisco ISE with Cisco FMC for Rapid Threat Containment?

  A. pxGrid

  B. FTD RTC

  C. FMC RTC

  D. ISEGrid

  Correct Answer: A

• Question 314:

  What is the maximum SHA level of filtering that Threat Intelligence Director supports?

  A. SHA-1024

  B. SHA-4096

  C. SHA-512

  D. SHA-256

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/cisco_threat_intelligence_director__tid_.html

• Question 315:

  With Cisco FirePOWER Threat Defense software, which interface mode do you configure to passively receive traffic that passes the appliance?

  A. transparent

  B. routed

  C. passive

  D. inline set

  E. inline tap

  Correct Answer: C

• Question 316:

  Which Cisco Advanced Malware Protection for Endpoints policy is used only for monitoring endpoint actively?

  A. Windows domain controller

  B. audit

  C. triage

  D. protection

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/214933-amp-for-endpoints-deployment-methodology.html

• Question 317:

  What is a valid Cisco AMP file disposition?

  A. non-malicious

  B. malware

  C. known-good

  D. pristine

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Reference_a_wrapper_Chapter_topic_here.html

• Question 318:

  In a Cisco AMP for Networks deployment, which disposition is returned if the cloud cannot be reached?

  A. unavailable

  B. unknown

  C. clean

  D. disconnected

  Correct Answer: A

  Unavailable indicates that the system could not query the AMP cloud https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/file_malware_events_and_network_file_trajectory.html

• Question 319:

  Which two remediation options are available when Cisco FMC is integrated with Cisco ISE? (Choose two.)

  A. dynamic null route configured

  B. DHCP pool disablement

  C. quarantine

  D. port shutdown

  E. host shutdown

  Correct Answer: CD

  Reference: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/210524-configure-firepower-6-1-pxgrid-remediati.html

• Question 320:

  Which action should you take when Cisco Threat Response notifies you that AMP has identified a file as malware?

  A. Add the malicious file to the block list.

  B. Send a snapshot to Cisco for technical support.

  C. Forward the result of the investigation to an external threat-analysis engine.

  D. Wait for Cisco Threat Response to automatically block the malware.

  Correct Answer: A