Cisco 300-710 Securing Networks with Cisco Firepower Exam Exam Practice Test Questions

• Question 1

  What are two application layer preprocessors? (Choose two.)

  • CIFS
  • IMAP
  • SSL
  • DNP3
  • ICMP

  Show Answer Answer: B, C Next

• Question 2

  A company is in the process of deploying intrusion protection with Cisco FTDs managed by a Cisco FMC. Which action must be selected to enable fewer rules detect only critical conditions and avoid false positives?

  • Connectivity Over Security
  • Balanced Security and Connectivity
  • Maximum Detection
  • No Rules Active

  Show Answer Answer: A Next

• Question 3

  An engineer has been tasked with providing disaster recovery for an organization's primary Cisco FMC. What must be done on the primary and secondary Cisco FMCs to ensure that a copy of the original corporate policy is available if the primary Cisco FMC fails?

  • Configure high-availability in both the primary and secondary Cisco FMCs
  • Connect the primary and secondary Cisco FMC devices with Category 6 cables of not more than 10 meters in length.
  • Place the active Cisco FMC device on the same trusted management network as the standby device
  • Restore the primary Cisco FMC backup configuration to the secondary Cisco FMC device when the primary device fails

  Show Answer Answer: D Next

• Question 4

  A network engineer is logged into the Cisco AMP for Endpoints console and sees a malicious verdict for an identified SHA-256 hash. Which configuration is needed to mitigate this threat?

  • Use regular expressions to block the malicious file.
  • Add the hash from the infected endpoint to the network block list.
  • Add the hash to the simple custom detection list.
  • Enable a personal firewall in the infected endpoint.

  Show Answer Answer: C Next

• Question 5

  An engineer Is configuring a Cisco FTD device to place on the Finance VLAN to provide additional protection tor company financial data. The device must be deployed without requiring any changes on the end user workstations, which currently use DHCP lo obtain an IP address. How must the engineer deploy the device to meet this requirement?

  • Deploy the device in routed mode and allow DHCP traffic in the access control policies.
  • Deploy the device in routed made aid enable the DHCP Relay feature.
  • Deploy the device in transparent mode and allow DHCP traffic in the access control policies
  • Deploy the device in transparent mode and enable the DHCP Server feature.

  Show Answer Answer: C Next