300-710 exam

An engineer is building a new access control policy using Cisco FMC. The policy must inspect a unique IPS policy as well as log rule matching. Which action must be taken to meet these requirements?A . Configure an IPS policy and enable per-rule logging.B . Disable the default IPS policy...

Which CLI command is used to generate firewall debug messages on a Cisco Firepower?A . system support firewall-engine-debugB . system support ssl-debugC . system support platformD . system support dump-tableView AnswerAnswer: A Explanation: Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212330-firepower-management-center-display-acc.html

An engineer is configuring a Cisco IPS to protect the network and wants to test a policy before deploying it. A copy of each incoming packet needs to be monitored while traffic flow remains constant. Which IPS mode should be implemented to meet these requirements?A . Inline tapB . passiveC...

What are two application layer preprocessors? (Choose two.)A . CIFSB . IMAPC . SSLD . DNP3E . ICMPView AnswerAnswer: B,C Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Application_Layer_Preprocessors.html

An organization does not want to use the default Cisco Firepower block page when blocking HTTP traffic. The organization wants to include information about its policies and procedures to help educate the users whenever a block occurs. Which two steps must be taken to meet these requirements? (Choose two.)A ....

After deploying a network-monitoring tool to manage and monitor networking devices in your organization, you realize that you need to manually upload an MIB for the Cisco FMC. In which folder should you upload the MIB file?A . /etc/sf/DCMIB . ALERTC . /sf/etc/DCEALERD . MIBE . /etc/sf/DCEALERF . MIBG ....

Which two packet captures does the FTD LINAengine support? (Choose two.)A . Layer 7 network IDB . source IPC . application IDD . dynamic firewall importingE . protocolView AnswerAnswer: B,E Explanation: Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212474-working-with-firepower-threat-defense-f.html

Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD? (Choose two.)A . OSPFv2 with IPv6 capabilitiesB . virtual linksC . SHA authentication to OSPF packetsD . area boundary router type 1 LSA filteringE . MD5 authentication to OSPF packetsView AnswerAnswer: B,E Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/ospf_for_firepower_threat_defense.html

On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?A . transparent inline modeB . TAP modeC . strict TCP enforcementD . propagate link stateView AnswerAnswer: D Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/inline_sets_and_passive_interfaces_for_firepower_threat_defense.html

Which Cisco Firepower rule action displays an HTTP warning page?A . MonitorB . BlockC . Interactive BlockD . Allow with WarningView AnswerAnswer: C Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/firesight/541/user-guide/FireSIGHT-System-UserGuide-v5401/AC-Rules-Tuning-Overview.html#76698