Cisco CCNP Security 300-710 Questions & Answers

• Question 331:

  When do you need the file-size command option during troubleshooting with packet capture?

  A. when capture packets are less than 16 MB

  B. when capture packets are restricted from the secondary memory

  C. when capture packets exceed 10 GB

  D. when capture packets exceed 32 MB

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/troubleshooting_the_system.html

• Question 332:

  Which command-line mode is supported from the Cisco Firepower Management Center CLI?

  A. privileged

  B. user

  C. configuration

  D. admin

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/660/configuration/guide/fpmc-config-guide-v66/command_line_reference.pdf

• Question 333:

  Which command is entered in the Cisco FMC CLI to generate a troubleshooting file?

  A. show running-config

  B. show tech-support chassis

  C. system support diagnostic-cli

  D. sudo sf_troubleshoot.pl

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/support/docs/security/sourcefire-defense-center/117663-technote-SourceFire-00.html

• Question 334:

  Which CLI command is used to control special handling of ClientHello messages?

  A. system support ssl-client-hello-tuning

  B. system support ssl-client-hello-display

  C. system support ssl-client-hello-force-reset

  D. system support ssl-client-hello-reset

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/firepower_command_line_reference.html

• Question 335:

  Which command is typed at the CLI on the primary Cisco FTD unit to temporarily stop running high-availability?

  A. configure high-availability resume

  B. configure high-availability disable

  C. system support network-options

  D. configure high-availability suspend

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/firepower_threat_defense_high_availability.html

• Question 336:

  Which group within Cisco does the Threat Response team use for threat analysis and research?

  A. Cisco Deep Analytics

  B. OpenDNS Group

  C. Cisco Network Response

  D. Cisco Talos

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/products/security/threat-response.html#~benefits

• Question 337:

  Which CLI command is used to generate firewall debug messages on a Cisco Firepower?

  A. system support firewall-engine-debug

  B. system support ssl-debug

  C. system support platform

  D. system support dump-table

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212330-firepower-management-center-display-acc.html

• Question 338:

  Which action should be taken after editing an object that is used inside an access control policy?

  A. Delete the existing object in use.

  B. Refresh the Cisco FMC GUI for the access control policy.

  C. Redeploy the updated configuration.

  D. Create another rule using a different object name.

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config-guide-v63/reusable_objects.html

• Question 339:

  Which Cisco Firepower feature is used to reduce the number of events received in a period of time?

  A. rate-limiting

  B. suspending

  C. correlation

  D. thresholding

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa-firepower-module-user-guide-v541/Intrusion-Global-Threshold.html

• Question 340:

  Which report template field format is available in Cisco FMC?

  A. box lever chart

  B. arrow chart

  C. bar chart

  D. benchmark chart

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Working_with_Reports.html