CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Cisco®
  5. 300-710

Free 300-710 Exam Braindumps (page: 37)

Page 37 of 66
PDF with 325 Questions

A network engineer is logged into the Cisco AMP for Endpoints console and sees a malicious verdict for an identified SHA-256 hash.
Which configuration is needed to mitigate this threat?

  1. Add the hash to the simple custom deletion list.
  2. Use regular expressions to block the malicious file.
  3. Enable a personal firewall in the infected endpoint.
  4. Add the hash from the infected endpoint to the network block list.

Answer(s): A



An organization has a Cisco IPS running in inline mode and is inspecting traffic for malicious activity.
When traffic is received by the Cisco IRS, if it is not dropped, how does the traffic get to its destination?

  1. It is retransmitted from the Cisco IPS inline set.
  2. The packets are duplicated and a copy is sent to the destination.
  3. It is transmitted out of the Cisco IPS outside interface.
  4. It is routed back to the Cisco ASA interfaces for transmission.

Answer(s): A



A network administrator is concerned about (he high number of malware files affecting users' machines.
What must be done within the access control policy in Cisco FMC to address this concern?

  1. Create an intrusion policy and set the access control policy to block.
  2. Create an intrusion policy and set the access control policy to allow.
  3. Create a file policy and set the access control policy to allow.
  4. Create a file policy and set the access control policy to block.

Answer(s): D



An engineer is investigating connectivity problems on Cisco Firepower that is using service group tags. Specific devices are not being tagged correctly, which is preventing clients from using the proper policies when going through the firewall How is this issue resolved?

  1. Use traceroute with advanced options.
  2. Use Wireshark with an IP subnet filter.
  3. Use a packet capture with match criteria.
  4. Use a packet sniffer with correct filtering

Answer(s): C



Page 37 of 66



Post your Comments and Discuss Cisco® 300-710 exam with other Community members:

Neo commented on October 10, 2024
Gets easier as you go along
SOUTH AFRICA
upvote

Neo commented on October 10, 2024
Need more practice
SOUTH AFRICA
upvote

Violet commented on October 10, 2024
Need more practice
SOUTH AFRICA
upvote

Neo commented on October 10, 2024
Challenging
SOUTH AFRICA
upvote

Kopano commented on October 10, 2024
Prep going well
SOUTH AFRICA
upvote

Neo commented on October 10, 2024
Happy with the material
SOUTH AFRICA
upvote

Emily commented on October 09, 2024
A bit challe
SOUTH AFRICA
upvote

Emily commented on October 09, 2024
grt resource
SOUTH AFRICA
upvote