Get 300-710 Actual Free Exam Q&As to Prepare for Your Cisco Certification
Cisco Actual Free Exam Questions And Answers
NEW QUESTION # 67
A network engineer sets up a secondary Cisco MC that is integrated with Cisco Security Packet Analyzer What occurs when the secondary Cisco MC synchronizes with the primary Cisco FMC?
- A. The secondary Cisco FMC must be reintegrated with the Cisco Security Packet Analyzer after the synchronization
- B. The existing configuration for integration of the secondary Cisco FMC the Cisco Security Packet Analyzer is overwritten.
- C. The existing integration configuration is replicated to the primary Cisco FMC
- D. The synchronization between the primary and secondary Cisco FMC fails
Answer: B
NEW QUESTION # 68
Which protocol establishes network redundancy in a switched Firepower device deployment?
- A. GLBP
- B. STP
- C. HSRP
- D. VRRP
Answer: B
Explanation:
Section: Deployment
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/firepower_threat_defense_high_availability.html
NEW QUESTION # 69
Within Cisco Firepower Management Center, where does a user add or modify widgets?
- A. summary tool
- B. reporting
- C. dashboard
- D. context explorer
Answer: C
NEW QUESTION # 70
What is a behavior of a Cisco FMC database purge?
- A. The specified data is removed from Cisco FMC and kept for two weeks.
- B. Data can be recovered from the device.
- C. The appropriate process is restarted.
- D. User login and history data are removed from the database if the User Activity check box is selected.
Answer: C
NEW QUESTION # 71
Refer to the exhibit.
What is the effect of the existing Cisco FMC configuration?
- A. The SSL-encrypted communication channel between the Cisco FMC and the managed device becomes plain-text communication channel.
- B. The managed device is deleted from the Cisco FMC.
- C. The management connection between the Cisco FMC and the Cisco FTD is disabled.
- D. The remote management port for communication between the Cisco FMC and the managed device changes to port 8443.
Answer: C
NEW QUESTION # 72
A network administrator needs to create a policy on Cisco Firepower to fast-path traffic to avoid Layer 7 inspection. The rate at which traffic is inspected must be optimized. What must be done to achieve this goal?
- A. Disable TCP inspection.
- B. Configure modular policy framework.
- C. Configure a prefilter policy.
- D. Enable lhe FXOS for multi-instance.
Answer: C
NEW QUESTION # 73
An engineer configures an access control rule that deploys file policy configurations to security zones or tunnel zones, and it causes the device to restart. What is the reason for the restart?
- A. Source or destination security zones in the source tunnel zone do not match the security zones that are associated with interfaces on the target devices.
- B. The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the destination policy.
- C. Source or destination security zones in the access control rule matches the security zones that are associated with interfaces on the target devices.
- D. The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the source policy.
Answer: C
NEW QUESTION # 74
An engineer needs to configure remote storage on Cisco FMC. Configuration backups must be available from a secure location on the network for disaster recovery. Reports need to back up to a shared location that auditors can access with their Active Directory logins. Which strategy must the engineer use to meet these objectives?
- A. Use SMB for both backups and reports.
- B. Use SSH for backups and NFS for reports.
- C. Use NFS for both backups and reports.
- D. Use SMB for backups and NFS for reports.
Answer: A
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/system
"You cannot send backups to one remote system and reports to another, but you can choose to send either to a remote system and store the other on the Firepower Management Center."
NEW QUESTION # 75
An administrator is working on a migration from Cisco ASA to the Cisco FTD appliance and needs to test the rules without disrupting the traffic. Which policy type should be used to configure the ASA rules during this phase of the migration?
- A. Prefilter
- B. identity
- C. Access Control
- D. Intrusion
Answer: C
NEW QUESTION # 76
Drag and drop the steps to restore an automatic device registration failure on the standby Cisco FMC from the left into the correct order on the right. Not all options are used.
Answer:
Explanation:
NEW QUESTION # 77
A network engineer is configuring URL Filtering on Firepower Threat Defense. Which two port requirements on the Firepower Management Center must be validated to allow communication with the cloud service? (Choose two.)
- A. outbound port TCP/443
- B. outbound port TCP/80
- C. outbound port TCP/8080
- D. inbound port TCP/443
- E. inbound port TCP/80
Answer: A,B
Explanation:
Section: Management and Troubleshooting
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide- v60/Security__Internet_Access__and_Communication_Ports.html
NEW QUESTION # 78
Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD? (Choose two.)
- A. SHA authentication to OSPF packets
- B. virtual links
- C. MD5 authentication to OSPF packets
- D. area boundary router type 1 LSA filtering
- E. OSPFv2 with IPv6 capabilities
Answer: B,C
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/ospf_for_firepower_threat_defense.html
NEW QUESTION # 79
A Cisco FMC administrator wants to configure fastpathing of trusted network traffic to increase performance.
In which type of policy would the administrator configure this feature?
- A. Identity policy
- B. Prefilter policy
- C. Intrusion policy
- D. Network Analysis policy
Answer: B
NEW QUESTION # 80
Which command is run at the CLI when logged in to an FTD unit, to determine whether the unit is managed locally or by a remote FMC server?
- A. system generate-troubleshoot
- B. show managers
- C. show running-config | include manager
- D. show configuration session
Answer: B
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/command_ref/ b_Command_Reference_for_Firepower_Threat_Defense/c_3.html
NEW QUESTION # 81
A network engineer must provide redundancy between two Cisco FTD devices. The redundancy configuration must include automatic configuration, translation, and connection updates. After the initial configuration of the two appliances, which two steps must be taken to proceed with the redundancy configuration? (Choose two.)
- A. Configure the failover link with stateful properties.
- B. Configure the virtual MAC address on the failover link.
- C. Configure the standby IP addresses.
- D. Disable hellos on the inside interface.
- E. Ensure the high availability license is enabled.
Answer: B,C
NEW QUESTION # 82
With Cisco FTD software, which interface mode must be configured to passively receive traffic that passes through the appliance?
- A. firewall
- B. tap
- C. IPS-only
- D. ERSPAN
Answer: D
Explanation:
Reference:
v64/interface_overview_for_firepower_threat_defense.html
NEW QUESTION # 83
......
300-710 Questions Truly Valid For Your Cisco Exam: https://2cram.actualtestsit.com/Cisco/300-710-exam-prep-dumps.html