Download Cisco.300-710.CertDumps.2024-08-05.338q.vcex

Download Exam

File Info

Exam Certifications: CCNP Security, Cisco Certified Specialist - Network Security Firepower
Number 300-710
File Name Cisco.300-710.CertDumps.2024-08-05.338q.vcex
Size 5 MB
Posted Aug 05, 2024
Download Cisco.300-710.CertDumps.2024-08-05.338q.vcex

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase

Coupon: MASTEREXAM
With discount: 20%





Demo Questions

Question 1

What is the role of the casebook feature in Cisco Threat Response? 


  1. sharing threat analysts 
  2. pulling data via the browser extension 
  3. triage automaton with alerting 
  4. alert prioritization   
Correct answer: A
Explanation:
Casebook – It is used to record, organize, and share sets of observables of interest primarily during an investigation and threat analysis. You can use a casebook to get the current verdicts or dispositions on the observables. Reference: https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/esa_user_guide_13-5-1/b_ESA_Admin_Guide_ces_13-5-1/b_ESA_Admin_Guide_13-0_chapter_0110001.pdf 
Casebook – It is used to record, organize, and share sets of observables of interest primarily during an investigation and threat analysis. You can use a casebook to get the current verdicts or dispositions on the observables. 
Reference: https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/esa_user_guide_13-5-1/b_ESA_Admin_Guide_ces_13-5-1/b_ESA_Admin_Guide_13-0_chapter_0110001.pdf 



Question 2

An administrator is adding a new URL-based category feed to the Cisco FMC for use within the policies. 
The intelligence source does not use STIX. but instead uses a .txt file format. Which action ensures that regular updates are provided? 


  1. Add a URL source and select the flat file type within Cisco FMC. 
  2. Upload the .txt file and configure automatic updates using the embedded URL. 
  3. Add a TAXII feed source and input the URL for the feed. 
  4. Convert the .txt file to STIX and upload it to the Cisco FMC.   
Correct answer: A



Question 3

An engineer installs a Cisco FTD device and wants to inspect traffic within the same subnet passing through a firewall and inspect traffic destined to the Internet. Which configuration will meet this requirement? 


  1. transparent firewall mode with IRB only 
  2. routed firewall mode with BVI and routed interfaces 
  3. transparent firewall mode with multiple BVIs 
  4. routed firewall mode with routed interfaces only   
Correct answer: B



Question 4

A network administrator configured a NAT policy that translates a public IP address to an internal web server IP address. An access policy has also been created that allows any source to reach the public IP address on port 80. The web server is still not reachable from the Internet on port 80. Which configuration change is needed? 


  1. The intrusion policy must be disabled for port 80. 
  2. The access policy rule must be configured for the action trust. 
  3. The NAT policy must be modified to translate the source IP address as well as destination IP address. 
  4. The access policy must allow traffic to the internal web server IP address.   
Correct answer: D



Question 5

A network administrator is migrating from a Cisco ASA to a Cisco FTD. EIGRP is configured on the Cisco ASA but it is not available in the Cisco FMC. Which action must the administrator take to enable this feature on the Cisco FTD? 


  1. Configure EIGRP parameters using FlexConfig objects. 
  2. Add the command feature-eigrp via the FTD CLI. 
  3. Create a custom variable set and enable the feature in the variable set. 
  4. Enable advanced configuration options in the FMC.   
Correct answer: A
Explanation:
EIGRP is not natively supported by FTD so we need to use FlexConfig to push EIGRP commands to FTD.   
EIGRP is not natively supported by FTD so we need to use FlexConfig to push EIGRP commands to FTD. 
  



Question 6

A security engineer found a suspicious file from an employee email address and is trying to upload it for analysis, however the upload is failing. The last registration status is still active. What is the cause for this issue? 


  1. Cisco AMP for Networks is unable to contact Cisco Threat Grid on premise. 
  2. Cisco AMP for Networks is unable to contact Cisco Threat Grid Cloud. 
  3. There is a host limit set. 
  4. The user agent status is set to monitor.   
Correct answer: C



Question 7

An administrator is attempting to add a new FTD device to their FMC behind a NAT device with a NAT ID of NAT001 and a password of Cisco0420l06525. The private IP address of the FMC server is 192.168.45.45 which is being translated to the public IP address of 209.165.200.225/27. Which command set must be used in order to accomplish this task? 


  1. configure manager add 209.165.200.225 <reg_key> <nat_id> 
  2. configure manager add 192.168.45.45 <reg_key> <nat_id> 
  3. configure manager add 209.165.200.225 255.255.255.224 <reg_key> <nat_id> 
  4. configure manager add 209.165.200.225/27 <reg_key> <nat_id>   
Correct answer: A



Question 8

A security analyst must create a new report within Cisco FMC to show an overview of the daily attacks, vulnerabilities, and connections. The analyst wants to reuse specific dashboards from other reports to create this consolidated one. Which action accomplishes this task? 


  1. Create a dashboard object via Object Management to represent the desired views. 
  2. Modify the Custom Workflows within the Cisco FMC to feed the desired data into the report. 
  3. Copy the Malware Report and modify the sections to pull components from other reports. 
  4. Use the import feature in the newly created report to select which dashboards to add.   
Correct answer: D



Question 9

A network engineer must provide redundancy between two Cisco FTD devices. The redundancy configuration must include automatic configuration, translation, and connection updates. After the initial configuration of the two appliances, which two steps must be taken to proceed with the redundancy configuration? (Choose two) 


  1. Configure the virtual MAC address on the failover link. 
  2. Disable hellos on the inside interface. 
  3. Configure the standby IP addresses. 
  4. Ensure the high availability license is enabled. 
  5. Configure the failover link with stateful properties.   
Correct answer: CE
Explanation:
Configure FTD High Availability on Firepower Appliances … Step 4. Configure the Data interfaces (primary and standby IP addresses) Step 10. Stay on the High Availability tab and configure Virtual MAC addresses Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/212699-configure-ftd-high-availability-on-firep.html We don’t configure the virtual MAC on the failover link but on the link to the network -> Answer A is not correct. 
Configure FTD High Availability on Firepower Appliances 
… 
Step 4. Configure the Data interfaces (primary and standby IP addresses) 
Step 10. Stay on the High Availability tab and configure Virtual MAC addresses 
Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/212699-configure-ftd-high-availability-on-firep.html 
We don’t configure the virtual MAC on the failover link but on the link to the network -> Answer A is not correct. 



Question 10

An engineer attempts to pull the configuration for a Cisco FTD sensor to review with Cisco TAC but does not have direct access to the CLI for the device. The CLI for the device is managed by Cisco FMC to which the engineer has access. Which action in Cisco FMC grants access to the CLI for the device? 


  1. Export the configuration using the Import/Export tool within Cisco FMC. 
  2. Create a backup of the configuration within the Cisco FMC. 
  3. Use the show run all command in the Cisco FTD CLI feature within Cisco FMC. 
  4. Download the configuration file within the File Download section of Cisco FMC.   
Correct answer: C









CONNECT US

Facebook

Twitter

PROFEXAM WITH A 20% DISCOUNT

You can buy ProfExam with a 20% discount!

Get Now!


HOW TO OPEN VCEX FILES

Use ProfExam Simulator to open VCEX files