[May 06, 2022] Pass Cisco 300-710 Exam Info and Free Practice Test [Q118-Q136]

NEW QUESTION 118
Which CLI command is used to control special handling of ClientHello messages?

system support ssl-client-hello-tuning

system support ssl-client-hello-display

system support ssl-client-hello-force-reset

system support ssl-client-hello-enabled

NEW QUESTION 119
An organization has noticed that malware was downloaded from a website that does not currently have a known bad reputation. How will this issue be addresses globally in the quickest way possible and with the least amount of impact?

by denying outbound web access

Cisco Talos will automatically update the policies.

by Isolating the endpoint

by creating a URL object in the policy to block the website

NEW QUESTION 120
What is the maximum SHA level of filtering that Threat Intelligence Director supports?

SHA-1024

SHA-4096

SHA-512

SHA-256

NEW QUESTION 121
administrator is configuring SNORT inspection policies and is seeing failed deployment messages in Cisco FMC . What information should the administrator generate for Cisco TAC to help troubleshoot?

A Troubleshoot” file for the device in question.

A “show tech” file for the device in question

A “show tech” for the Cisco FMC.

A “troubleshoot” file for the Cisco FMC

NEW QUESTION 122
A network engineer is extending a user segment through an FTD device for traffic inspection without creating another IP subnet How is this accomplished on an FTD device in routed mode?

by leveraging the ARP to direct traffic through the firewall

by assigning an inline set interface

by using a BVI and create a BVI IP address in the same subnet as the user segment

by bypassing protocol inspection by leveraging pre-filter rules

NEW QUESTION 123
An engineer configures an access control rule that deploys file policy configurations to security zones, and it cause the device to restart. What is the reason for the restart?

Source or destination security zones in the access control rule matches the security zones that are associated with interfaces on the target devices.

The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the destination policy.

Source or destination security zones in the source tunnel zone do not match the security zones that are associated with interfaces on the target devices.

The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the source policy.

NEW QUESTION 124
A network administrator notices that remote access VPN users are not reachable from inside the network. It is determined that routing is configured correctly, however return traffic is entering the firewall but not leaving it What is the reason for this issue?

A manual NAT exemption rule does not exist at the top of the NAT table.

An external NAT IP address is not configured.

An external NAT IP address is configured to match the wrong interface.

An object NAT exemption rule does not exist at the top of the NAT table.

NEW QUESTION 125
Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?

configure coredump packet-engine enable

capture-traffic

capture

capture WORD

NEW QUESTION 126
A network administrator notices that inspection has been interrupted on all non-managed interfaces of a device. What is the cause of this?

The value of the highest MTU assigned to any non-management interface was changed.

The value of the highest MSS assigned to any non-management interface was changed.

A passive interface was associated with a security zone.

Multiple inline interface pairs were added to the same inline interface.

NEW QUESTION 127
An engineer is investigating connectivity problems on Cisco Firepower for a specific SGT. Which command allows the engineer to capture real packets that pass through the firewall using an SGT of 64?

capture CAP type inline-tag 64 match ip any any

capture CAP match 64 type inline-tag ip any any

capture CAP headers-only type inline-tag 64 match ip any any

capture CAP buffer 64 match ip any any

NEW QUESTION 128
An engineer is troubleshooting connectivity to the DNS servers from hosts behind a new Cisco FTD device. The hosts cannot send DNS queries to servers in the DMZ. Which action should the engineer take to troubleshoot this issue using the real DNS packets?

Use the Connection Events dashboard to check the block reason and adjust the inspection policy as needed.

Use the packet capture tool to check where the traffic is being blocked and adjust the access control or intrusion policy as needed.

Use the packet tracer tool to determine at which hop the packet is being dropped.

Use the show blocks command in the Threat Defense CLI tool and create a policy to allow the blocked traffic.

NEW QUESTION 129
What is the result of specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?

The rate-limiting rule is disabled.

Matching traffic is not rate limited.

The system rate-limits all traffic.

The system repeatedly generates warnings.

NEW QUESTION 130
Which group within Cisco does the Threat Response team use for threat analysis and research?

Cisco Deep Analytics

OpenDNS Group

Cisco Network Response

Cisco Talos

NEW QUESTION 131
In which two ways do access control policies operate on a Cisco Firepower system? (Choose two.)

Traffic inspection can be interrupted temporarily when configuration changes are deployed.

The system performs intrusion inspection followed by file inspection.

They can block traffic based on Security Intelligence data.

File policies use an associated variable set to perform intrusion prevention.

The system performs a preliminary inspection on trusted traffic to validate that it matches the trusted parameters.

NEW QUESTION 132
Which CLI command is used to control special handling of ClientHello messages?

system support ssl-client-hello-tuning

system support ssl-client-hello-display

system support ssl-client-hello-force-reset

system support ssl-client-hello-reset

NEW QUESTION 133
An engineer is investigating connectivity problems on Cisco Firepower that is using service group tags. Specific devices are not being tagged correctly, which is preventing clients from using the proper policies when going through the firewall How is this issue resolved?

Use traceroute with advanced options.

Use Wireshark with an IP subnet filter.

Use a packet capture with match criteria.

Use a packet sniffer with correct filtering

NEW QUESTION 134
Drag and drop the steps to restore an automatic device registration failure on the standby Cisco FMC from the left into the correct order on the right. Not all options are used.

Explanation

NEW QUESTION 135
A company is in the process of deploying intrusion protection with Cisco FTDs managed by a Cisco FMC. Which action must be selected to enable fewer rules detect only critical conditions and avoid false positives?

Connectivity Over Security

Balanced Security and Connectivity

Maximum Detection

No Rules Active

NEW QUESTION 136
An engineer is configuring a second Cisco FMC as a standby device but is unable to register with the active unit. What is causing this issue?

The primary FMC currently has devices connected to it.

The code versions running on the Cisco FMC devices are different

The licensing purchased does not include high availability

There is only 10 Mbps of bandwidth between the two devices.

[May 06, 2022] Pass Cisco 300-710 Exam Info and Free Practice Test [Q118-Q136]

Leave a Reply Cancel reply

Related Posts

The Best Practice Test Preparation for the 350-701 Certification Exam [Q25-Q42]

[Q16-Q33] Exam Questions and Answers for 700-760 Study Guide Questions and Answers!

500-220 Dumps PDF 2023 Strategy Your Preparation Efficiently [Q23-Q46]