CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Cisco®
  5. 300-710

Free 300-710 Exam Braindumps (page: 27)

Page 27 of 66
PDF with 325 Questions

Refer to the exhibit.



An administrator is looking at some of the reporting capabilities for Cisco Firepower and noticed this section of the Network Risk report showing a lot of SSL activity that cloud be used for evasion.
Which action will mitigate this risk?

  1. Use SSL decryption to analyze the packets.
  2. Use encrypted traffic analytics to detect attacks
  3. Use Cisco AMP for Endpoints to block all SSL connection
  4. Use Cisco Tetration to track SSL connections to servers.

Answer(s): A



An engineer is attempting to add a new FTD device to their FMC behind a NAT device with a NAT ID of ACME001 and a password of Cisco388267669.
Which command set must be used in order to accomplish this?

  1. configure manager add ACME001 <registration key> <FMC IP>
  2. configure manager add <FMC IP> ACME0O1 <registration key>
  3. configure manager add DONTRESOLVE <FMC IP> AMCE001 <registration key>
  4. configure manager add <FMC IP> registration key> ACME001

Answer(s): D



A user within an organization opened a malicious file on a workstation which in turn caused a ransomware attack on the network.
What should be configured within the Cisco FMC to ensure the file is tested for viruses on a sandbox system?

  1. Capacity handling
  2. Local malware analysis
  3. Spere analysis
  4. Dynamic analysis

Answer(s): D



Refer to the exhibit.


What must be done to fix access to this website while preventing the same communication to all other websites?

  1. Create an intrusion policy rule to have Snort allow port 80 to only 172.1.1 50.
  2. Create an access control policy rule to allow port 80 to only 172.1.1 50.
  3. Create an intrusion policy rule to have Snort allow port 443 to only 172.1.1.50
  4. Create an access control policy rule to allow port 443 to only 172.1.1 50

Answer(s): B



Page 27 of 66



Post your Comments and Discuss Cisco® 300-710 exam with other Community members:

Neo commented on October 10, 2024
Gets easier as you go along
SOUTH AFRICA
upvote

Neo commented on October 10, 2024
Need more practice
SOUTH AFRICA
upvote

Violet commented on October 10, 2024
Need more practice
SOUTH AFRICA
upvote

Neo commented on October 10, 2024
Challenging
SOUTH AFRICA
upvote

Kopano commented on October 10, 2024
Prep going well
SOUTH AFRICA
upvote

Neo commented on October 10, 2024
Happy with the material
SOUTH AFRICA
upvote

Emily commented on October 09, 2024
A bit challe
SOUTH AFRICA
upvote

Emily commented on October 09, 2024
grt resource
SOUTH AFRICA
upvote