Free Cisco 300-710 Practice Test & Real Exam Questions
Drag and Drop Question
Refer to the exhibit. An engineer must create a QoS policy in Cisco Firepower Management Center to limit HTTP and HTTPS traffic from users in the HR department. The upload and download limit of the HTTP and HTTPS traffic must be set to 5 Mb/s. Drag and drop the values from the left onto the corresponding settings on the right.
Refer to the exhibit. An engineer must create a QoS policy in Cisco Firepower Management Center to limit HTTP and HTTPS traffic from users in the HR department. The upload and download limit of the HTTP and HTTPS traffic must be set to 5 Mb/s. Drag and drop the values from the left onto the corresponding settings on the right.
Correct Answer:
Which component is needed to perform rapid threat containment with Cisco FMC?
Correct Answer: C
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Drag and Drop Question
An engineer must configure high availability on two Cisco Secure Firewall Threat Defense appliances. Drag and drop the configuration steps from the left into the sequence on the right.
An engineer must configure high availability on two Cisco Secure Firewall Threat Defense appliances. Drag and drop the configuration steps from the left into the sequence on the right.
Correct Answer:
A network administrator is setting up a Cisco Secure Firewall Threat Defense to peer via BGP with two ISPs. The administrator wants traffic to certain IP ranges to prefer to come in one ISP instead of the other. What must be configured on the BGP connection to the peer to help facilitate the requirement?
Correct Answer: B
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
A security engineer is adding three Cisco FTD devices to a Cisco FMC. Two of the devices have successfully registered to the Cisco FMC. The device that is unable to register is located behind a router that translates all outbound traffic to the router's WAN IP address. Which two steps are required for this device to register to the Cisco FMC? (Choose two.)
Correct Answer: D,E
Vote an answer
What is a behavior of a Cisco FMC database purge?
Correct Answer: B
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
With Cisco FTD software, which interface mode must be configured to passively receive traffic that passes through the appliance?
Correct Answer: D
Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
Refer to the exhibit. An engineer is modifying an access control pokey to add a rule to inspect all DNS traffic that passes through the firewall.
After making the change and deploying the pokey they see that DNS traffic is not bang inspected by the Snort engine. What is the problem?
After making the change and deploying the pokey they see that DNS traffic is not bang inspected by the Snort engine. What is the problem?
Correct Answer: B
Vote an answer
Network traffic coining from an organization's CEO must never be denied.
Which access control policy configuration option should be used if the deployment engineer is not permitted to create a rule to allow all traffic?
Which access control policy configuration option should be used if the deployment engineer is not permitted to create a rule to allow all traffic?
Correct Answer: C
Vote an answer
There is an increased amount of traffic on the network and for compliance reasons, management needs visibility into the encrypted traffic.
What is a result of enabling TLS'SSL decryption to allow this visibility?
What is a result of enabling TLS'SSL decryption to allow this visibility?
Correct Answer: A
Vote an answer
