Free Download 300-710 Examp Dump: Cisco.300-710.CertDumps.2021-12-27.79q.vcex

Question 1

What is a result of enabling Cisco FTD clustering?

For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections.
Integrated Routing and Bridging is supported on the master unit.
Site-to-site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails.
All Firepower appliances can support Cisco FTD clustering.

Correct answer: C

Explanation:

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/clustering_for_the_firepower_threat_defense.html

Question 2

Which two conditions are necessary for high availability to function between two Cisco FTD devices?

(Choose two.)

The units must be the same version
Both devices can be part of a different group that must be in the same domain when configured within the FMC.
The units must be different models if they are part of the same series.
The units must be configured only for firewall routed mode.
The units must be the same model.

Correct answer: AE

Explanation:

Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/212699-configure-ftd-high-availability-on-firep.html

Question 3

On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?

transparent inline mode
TAP mode
strict TCP enforcement
propagate link state

Correct answer: D

Explanation:

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/inline_sets_and_passive_interfaces_for_firepower_threat_defense.html

Question 4

What are the minimum requirements to deploy a managed device inline?

inline interfaces, security zones, MTU, and mode
passive interface, MTU, and mode
inline interfaces, MTU, and mode
passive interface, security zone, MTU, and mode

Correct answer: C

Explanation:

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/ips_device_deployments_and_configuration.html

Question 5

What is the difference between inline and inline tap on Cisco Firepower?

Inline tap mode can send a copy of the traffic to another device.
Inline tap mode does full packet capture.
Inline mode cannot do SSL decryption.
Inline mode can drop malicious traffic.

Correct answer: D

Question 6

With Cisco Firepower Threat Defense software, which interface mode must be configured to passively receive traffic that passes through the appliance?

inline set
passive
routed
inline tap

Correct answer: D

Question 7

Which two deployment types support high availability? (Choose two.)

transparent
routed
clustered
intra-chassis multi-instance
virtual appliance in public cloud

Correct answer: AB

Explanation:

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/firepower_threat_defense_high_availability.html

Question 8

Which protocol establishes network redundancy in a switched Firepower device deployment?

STP
HSRP
GLBP
VRRP

Correct answer: A

Explanation:

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/firepower_threat_defense_high_availability.html

Question 9

Which interface type allows packets to be dropped?

passive
inline
ERSPAN
TAP

Correct answer: B

Explanation:

Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200908-configuring-firepower-threat-defense-int.html

Question 10

With Cisco Firepower Threat Defense, which two interface settings are required when configuring a routed interface? (Choose two.)

Redundant Interface
EtherChannel
Speed
Media Type
Duplex

Correct answer: CE

Explanation:

https://www.cisco.com/c/en/us/td/docs/security/firepower/610/fdm/fptd-fdm-config-guide-610/fptd-fdm-interfaces.html

Exam	Certifications: CCNP Security, Cisco Certified Specialist - Network Security Firepower
Number	300-710
File Name	Cisco.300-710.CertDumps.2021-12-27.79q.vcex
Size	282 KB
Posted	Dec 27, 2021
Download	Cisco.300-710.CertDumps.2021-12-27.79q.vcex

Download Cisco.300-710.CertDumps.2021-12-27.79q.vcex

File Info

How to open VCEX & EXAM Files?

Demo Questions