All About Simulation 300-710 Question

NEW QUESTION 1
Which two statements about deleting and re-adding a device to Cisco FMC are true? (Choose two.)

• A. An option to re-apply NAT and VPN policies during registration is available, so users do not need to re-apply the policies after registration is completed.
• B. Before re-adding the device in Cisco FMC, you must add the manager back in the device.
• C. No option to delete and re-add a device is available in the Cisco FMC web interface.
• D. The Cisco FMC web interface prompts users to re-apply access control policies.
• E. No option to re-apply NAT and VPN policies during registration is available, so users need to re-apply the policies after registration is completed.

Answer: DE

NEW QUESTION 2
Which two deployment types support high availability? (Choose two.)

• A. transparent
• B. routed
• C. clustered
• D. intra-chassis multi-instance
• E. virtual appliance in public cloud

Answer: AB

NEW QUESTION 3
When creating a report template, how can the results be limited to show only the activity of a specific subnet?

• A. Create a custom search in Firepower Management Center and select it in each section of the report.
• B. Add an Input Parameter in the Advanced Settings of the report, and set the type to Network/IP.
• C. Add a Table View section to the report with the Search field defined as the network in CIDR format.
• D. Select IP Address as the X-Axis in each section of the report.

Answer: B

NEW QUESTION 4
Which Cisco Firepower rule action displays an HTTP warning page?

• A. Monitor
• B. Block
• C. Interactive Block
• D. Allow with Warning

Answer: C

NEW QUESTION 5
What is the disadvantage of setting up a site-to-site VPN in a clustered-units environment?

• A. VPN connections can be re-established only if the failed master unit recovers.
• B. Smart License is required to maintain VPN connections simultaneously across all cluster units.
• C. VPN connections must be re-established when a new master unit is elected.
• D. Only established VPN connections are maintained when a new master unit is elected.

Answer: C

NEW QUESTION 6
Which two packet captures does the FTD LINA engine support? (Choose two.)

• A. Layer 7 network ID
• B. source IP
• C. application ID
• D. dynamic firewall importing
• E. protocol

Answer: BE

NEW QUESTION 7
Which Cisco Firepower Threat Defense, which two interface settings are required when configuring a routed interface? (Choose two.)

• A. Redundant Interface
• B. EtherChannel
• C. Speed
• D. Media Type
• E. Duplex

Answer: CE

NEW QUESTION 8
Which command must be run to generate troubleshooting files on an FTD?

• A. system support view-files
• B. sudo sf_troubleshoot.pl
• C. system generate-troubleshoot all
• D. show tech-support

Answer: B

NEW QUESTION 9
With Cisco Firepower Threat Defense software, which interface mode must be configured to passively receive traffic that passes through the appliance?

• A. inline set
• B. passive
• C. routed
• D. inline tap

Answer: B

NEW QUESTION 10
Which Cisco Advanced Malware Protection for Endpoints policy is used only for monitoring endpoint actively?

• A. Windows domain controller
• B. audit
• C. triage
• D. protection

Answer: B

NEW QUESTION 11
Which action should be taken after editing an object that is used inside an access control policy?

• A. Delete the existing object in use.
• B. Refresh the Cisco FMC GUI for the access control policy.
• C. Redeploy the updated configuration.
• D. Create another rule using a different object name.

Answer: C

NEW QUESTION 12
Within Cisco Firepower Management Center, where does a user add or modify widgets?

• A. dashboard
• B. reporting
• C. context explorer
• D. summary tool

Answer: A

NEW QUESTION 13
What is the maximum bit size that Cisco FMC supports for HTTPS certificates?

• A. 1024
• B. 8192
• C. 4096
• D. 2048

Answer: D

NEW QUESTION 14
Which protocol establishes network redundancy in a switched Firepower device deployment?

• A. STP
• B. HSRP
• C. GLBP
• D. VRRP

Answer: A

NEW QUESTION 15
Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?

• A. configure coredump packet-engine enable
• B. capture-traffic
• C. capture
• D. capture WORD

Answer: B

NEW QUESTION 16
Which Firepower feature allows users to configure bridges in routed mode and enables devices to perform Layer 2 switching between interfaces?

• A. FlexConfig
• B. BDI
• C. SGT
• D. IRB

Answer: D

NEW QUESTION 17
Which two types of objects are reusable and supported by Cisco FMC? (Choose two.)

• A. dynamic key mapping objects that help link HTTP and HTTPS GET requests to Layer 7 application protocols.
• B. reputation-based objects that represent Security Intelligence feeds and lists, application filters based on category and reputation, and file lists
• C. network-based objects that represent IP address and networks, port/protocols pairs, VLAN tags, security zones, and origin/destination country
• D. network-based objects that represent FQDN mappings and networks, port/protocol pairs, VXLAN tags, security zones and origin/destination country
• E. reputation-based objects, such as URL categories

Answer: BC

NEW QUESTION 18
In which two places can thresholding settings be configured? (Choose two.)

• A. on each IPS rule
• B. globally, within the network analysis policy
• C. globally, per intrusion policy
• D. on each access control rule
• E. per preprocessor, within the network analysis policy

Answer: AC

NEW QUESTION 19
Which report template field format is available in Cisco FMC?

• A. box lever chart
• B. arrow chart
• C. bar chart
• D. benchmark chart

Answer: C

NEW QUESTION 20
Which interface type allows packets to be dropped?

• A. passive
• B. inline
• C. ERSPAN
• D. TAP

Answer: B

NEW QUESTION 21
Which command is run at the CLI when logged in to an FTD unit, to determine whether the unit is managed locally or by a remote FMC server?

• A. system generate-troubleshoot
• B. show configuration session
• C. show managers
• D. show running-config | include manager

Answer: C

NEW QUESTION 22
......