Free Cisco 300-710 Practice Test & Real Exam Questions

Exam Code/Number: 300-710
Exam Name/Title: Securing Networks with Cisco Firepower
Certification Provider: Cisco
Corresponding Certification: CCNP Security

Exam Questions: 445
Updated On: Jul 01, 2026

Question #11

Refer to the exhibit. An engineer is modifying an access control policy to add a rule to inspect all DNS traffic that passes through the firewall. After making the change and deploying the policy, they see that DNS traffic is not being inspected by the Snort engine. What is the problem?

A. The rule is configured with the wrong setting for the source port.

B. The rule must define the source network for inspection as well as the port.

C. The action of the rule is set to trust instead of allow.

D. The rule must specify the security zone that originates the traffic.

Discussion 0

Correct Answer: C Vote an answer

Question #12

The network administrator wants to enhance the network security posture by enabling machine learning tor malware detection due to a concern with suspicious Microsoft executable file types that were seen while creating monthly security reports for the CIO. Which feature must be enabled to accomplish this goal?

A. Ethos

B. dynamic analysis

C. Spero

D. static analysis

Discussion 0

Correct Answer: C Vote an answer

Question #13

A network engineer is logged into the Cisco AMP for Endpoints console and sees a malicious verdict for an identified SHA-256 hash. Which configuration is needed to mitigate this threat?

A. Add the hash to the simple custom deletion list.

B. Enable a personal firewall in the infected endpoint.

C. Use regular expressions to block the malicious file.

D. Add the hash from the infected endpoint to the network block list.

Discussion 0

Correct Answer: A Vote an answer

Question #14

Drag and Drop Question
An engineer must create a basic access control policy in the Cisco Secure Firewall Management Center to block all traffic by default. Drag and drop the configuration actions from the left into sequence on the right.

Discussion 0

Correct Answer:

Explanation:
This order follows the logical FMC workflow: navigate to the policy section, create a new policy, define its behavior (default action), and finally assign it to the correct device(s).

Question #15

A Cisco FTD device is running in transparent firewall mode with a VTEP bridge group member ingress interface.
What must be considered by an engineer tasked with specifying a destination MAC address for a packet trace?

A. Only the UDP packet type is supported

B. The output format option for the packet logs unavailable

C. The VLAN ID and destination MAC address are optional

D. The destination MAC address is optional if a VLAN ID value is entered

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #16

Which option is the main function of Cisco Firepower impact flags?

A. They correlate data about intrusions and vulnerability.

B. They identify data that the ASA sends to the Firepower module.

C. They highlight known and suspected malicious IP addresses in reports.

D. They alert administrators when critical events occur.

Discussion 0

Correct Answer: A Vote an answer

Question #17

Refer to the exhibit. A systems administrator conducts a connectivity test to their SCCM server from a host machine and gets no response from the server. Which action ensures that the ping packets reach the destination and that the host receives replies?

A. Create an access control policy rule that allows ICMP traffic.

B. Create an ICMP allow list and add the ICMP destination to remove it from the implicit deny list.

C. Configure a custom Snort signature to allow ICMP traffic after Inspection.

D. Modify the Snort rules to allow ICMP traffic.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #18

Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD?
(Choose two.)

A. OSPFv2 with IPv6 capabilities

B. SHA authentication to OSPF packets

C. virtual links

D. area boundary router type 1 LSA filtering

E. MD5 authentication to OSPF packets

Discussion 0

Correct Answer: C,E Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #19

An engineer is configuring two new Cisco Secure Firewall Threat Defense devices to replace the existing firewalls. Network traffic must be analyzed for intrusion events without impacting the traffic. What must the engineer implement next to accomplish the goal?

A. Inline Pair in Tap mode

B. Passive mode

C. Inline Pair mode

D. ERSPAN Passive mode

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #20

A security engineer manages a firewall console and an endpoint console and finds it challenging and time consuming to review events and modify blocking of specific files in both consoles. Which action must the engineer take to streamline this process?

A. Initiate the integration between Secure FMC and Cisco Secure Endpoint from the Secure FMC using the AMP tab.

B. From the Secure FMC, create a Cisco Secure Endpoint object and reference the object in the Cisco Secure Endpoint console.

C. Within the Cisco Secure Endpoint console, copy the connector GUID and paste into the Cisco Secure Firewall Management Center (FMC) AMP tab.

D. From the Cisco Secure Endpoint console, create and copy an API key and paste into the Cisco Secure AMP tab.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Download Free Cisco 300-710 Demo

Simply submit your e-mail address below to get started with our free demo of your Cisco 300-710 exam.