Category 300-710

NO.79 A company is in the process of deploying intrusion prevention with Cisco FTDs managed by a Cisco FMC. An engineer must configure policies to detect potential intrusions but not block the suspicious traffic. Which action accomplishes this task?

NO.80 Which command is run on an FTD unit to associate the unit to an FMC manager that is at IP address 10.0.0.10, and that has the registration key Cisco123?

NO.81 An organization has seen a lot of traffic congestion on their links going out to the internet.
There is a Cisco Firepower device that processes all of the traffic going to the internet prior to leaving the enterprise.
How is the congestion alleviated so that legitimate business traffic reaches the destination?

NO.82 Which two statements about deleting and re-adding a device to Cisco FMC are true? (Choose two.)

NO.83 Which command is entered in the Cisco FMC CLI to generate a troubleshooting file?

NO.84 An administrator is optimizing the Cisco FTD rules to improve network performance, and wants to bypass inspection for certain traffic types to reduce the load on the Cisco FTD. Which policy must be configured to accomplish this goal?

NO.85 An engineer currently has a Cisco FTD device registered to the Cisco FMC and is assigned the address of 10 10.50.12. The organization is upgrading the addressing schemes and there is a requirement to convert the addresses to a format that provides an adequate amount of addresses on the network What should the engineer do to ensure that the new addressing takes effect and can be used for the Cisco FTD to Cisco FMC connection?

NO.86 A network administrator is deploying a Cisco IPS appliance and needs it to operate initially without affecting traffic flows.
It must also collect data to provide a baseline of unwanted traffic before being reconfigured to drop it. Which Cisco IPS mode meets these requirements?

NO.87 Refer to the exhibit An engineer is modifying an access control pokey to add a rule to inspect all DNS traffic that passes through the firewall After making the change and deploying the pokey they see that DNS traffic is not bang inspected by the Snort engine What is the problem?

NO.88 On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?

NO.89 A network administrator wants to configure a Cisco Secure Firewall Threat Defense instance managed by Cisco Secure Firewall Management Center to block traffic to known cryptomning networks. Which system settings must the administrator configure in Secure Firewall Management Center to meet the requirement?

NO.90 An engineer configures an access control rule that deploys file policy configurations to security zone or tunnel zones, and it causes the device to restart. What is the reason for the restart?

NO.91 Network users are experiencing Intermittent issues with internet access. An engineer ident med mat the issue Is being caused by NAT exhaustion. How must the engineer change the dynamic NAT configuration to provide internet access for more users without running out of resources?

NO.92 Which report template field format is available in Cisco FMC?

NO.93 In which two places can thresholding settings be configured? (Choose two.)

NO.94 An administrator is creating interface objects to better segment their network but is having trouble adding interfaces to the objects. What is the reason for this failure?

NO.95 Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD? (Choose two.)

NO.96 Which command is run on an FTD unit to associate the unit to an FMC manager that is at IP address
10.0.0.10, and that has the registration key Cisco123?

NO.97 An engineer must export a packet capture from Cisco Secure Firewall Management Center to assist in troubleshooting an issue an a Secure Firewall Threat Defense device. When the engineer navigates to URL for Secure Firewall Management Center at:
..<FMC IP>/capture/CAP/pcap/sample.pcap
An engineer receives a 403: Forbidden error instead of being provided with the PCAP file. Which action resolves the issue?

NO.98 An administrator must use Cisco FMC to install a backup route within the Cisco FTD to route traffic in case of a routing failure with the primary route. Which action accomplishes this task?

NO.99 A company is in the process of deploying intrusion protection with Cisco FTDs managed by a Cisco FMC.
Which action must be selected to enable fewer rules detect only critical conditions and avoid false positives?