Cisco CCNP Security 300-710 Questions & Answers

• Question 321:

  What is a behavior of a Cisco FMC database purge?

  A. User login and history data are removed from the database if the User Activity check box is selected.

  B. Data can be recovered from the device.

  C. The appropriate process is restarted.

  D. The specified data is removed from Cisco FMC and kept for two weeks.

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/management_center_database_purge.pdf

• Question 322:

  Which two packet captures does the FTD LINA engine support? (Choose two.)

  A. Layer 7 network ID

  B. source IP

  C. application ID

  D. dynamic firewall importing

  E. protocol

  Correct Answer: BE

  Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212474-working-with-firepower-threat-defense-f.html

• Question 323:

  Which two features of Cisco AMP for Endpoints allow for an uploaded file to be blocked? (Choose two.)

  A. application blocking

  B. simple custom detection

  C. file repository

  D. exclusions

  E. application whitelisting

  Correct Answer: AB

  configure custom malware detection policies and profiles for your entire organization, as well as perform flash and full scans on all your users' files perform malware analysis, including view heat maps, detailed file information, network file trajectory, and threat root causes configure multiple aspects of outbreak control, including automatic quarantines, application blocking to stop non-quarantined executables from running, and exclusion lists

  https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Reference_a_wrapper_Chapter_topic_here.html#id_96014

• Question 324:

  A network engineer is configuring URL Filtering on Firepower Threat Defense. Which two port requirements on the Firepower Management Center must be validated to allow communication with the cloud service? (Choose two.)

  A. outbound port TCP/443

  B. inbound port TCP/80

  C. outbound port TCP/8080

  D. inbound port TCP/443

  E. outbound port TCP/80

  Correct Answer: AE

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Security__Internet_Access__and_Communication_Ports.html

• Question 325:

  What is the maximum bit size that Cisco FMC supports for HTTPS certificates?

  A. 1024

  B. 8192

  C. 4096

  D. 2048

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/system_configuration.html

• Question 326:

  Which limitation applies to Cisco Firepower Management Center dashboards in a multidomain environment?

  A. Child domains can view but not edit dashboards that originate from an ancestor domain.

  B. Child domains have access to only a limited set of widgets from ancestor domains.

  C. Only the administrator of the top ancestor domain can view dashboards.

  D. Child domains cannot view dashboards that originate from an ancestor domain.

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Using_Dashboards.html

• Question 327:

  Which two statements about deleting and re-adding a device to Cisco FMC are true? (Choose two.)

  A. An option to re-apply NAT and VPN policies during registration is available, so users do not need to re-apply the policies after registration is completed.

  B. Before re-adding the device in Cisco FMC, you must add the manager back in the device.

  C. No option to delete and re-add a device is available in the Cisco FMC web interface.

  D. The Cisco FMC web interface prompts users to re-apply access control policies.

  E. There is no option to re-apply NAT and VPN policies during registration is available, so users need to re-apply the policies after registration is completed.

  Correct Answer: DE

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Device_Management_Basics.html

• Question 328:

  Within Cisco Firepower Management Center, where does a user add or modify widgets?

  A. dashboard

  B. reporting

  C. context explorer

  D. summary tool

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Using_Dashboards.html

• Question 329:

  What is a functionality of port objects in Cisco FMC?

  A. to mix transport protocols when setting both source and destination port conditions in a rule

  B. to represent protocols other than TCP, UDP, and ICMP

  C. to represent all protocols in the same way

  D. to add any protocol other than TCP or UDP for source port conditions in access control rules.

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/reusable_objects.html

• Question 330:

  Which command must be run to generate troubleshooting files on an FTD?

  A. system support view-files

  B. sudo sf_troubleshoot.pl

  C. system generate-troubleshoot all

  D. show tech-support

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/support/docs/security/sourcefire-defense-center/117663-technote-SourceFire-00.html