Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Cisco
  5. 300-710

Cisco 300-710 Exam Questions
Securing Networks with Cisco Firepower (300-710 SNCF) (Page 17 )

Updated On: 24-Feb-2026
Page 16 of 84
PDF with 412 Questions

A company is deploying a Cisco Secure IPS device configured in inline mode with a single Interface set that contains four interface pairs.
Which two configurations must be implemented to allow the IPS device to uniquely identify packet flows and prevent the reporting of duplicate traffic and false positives? (Choose two.)

  1. Set the source SPAN ports to tx only on the switches connected to the IPS interfaces
  2. Modify the security zones used by the Cisco Secure IPS device
  3. Change the MTU for the inline set to at least 1518
  4. Reconfigure access rules to drop all but the first occurrence of the packet
  5. Reassign the interface pairs to separate inline sets

Answer(s): B,E



A network engineer is planning on deploying a Cisco Secure Firewall Threat Defense Virtual appliance in transparent mode.
Which two virtual environments support this configuration? (Choose two.)

  1. OSI
  2. AWS
  3. GCP
  4. KVM
  5. ESXi

Answer(s): D,E



A network administrator is setting up a new highly available Cisco Secure Firewall Threat Defense (FTD) pair. The administrator wants to monitor that the interfaces on the secondary Secure FTD are reachable not just up.
What must the administrator configure?

  1. This happens by default when high availability is enabled.
  2. secondary IP address
  3. EUI 64 address on a high-availability link
  4. separate high-availability and failover links

Answer(s): B



An engineer is implementing a new Cisco Secure Firewall. The firewall must filter traffic between the three subnets:
· LAN 192.168.101.0/24
· DMZ 192.168.200.0/24
· WAN 10.0.0.0/30

Which firewall mode must the engineer implement?

  1. network
  2. routed
  3. gateway
  4. transparent

Answer(s): B



An administrator configures the interfaces of a Cisco Secure Firewall Threat Defense device in an inline IPS deployment. The administrator completes these actions:
· identifies the device and the interfaces
· sets the interface mode to inline
· enables the interfaces

Which configuration step must the administrator take next to complete the implementation?

  1. Set the interface to routed mode.
  2. Enable spanning-tree PortFast on the interfaces.
  3. Configure an inline set.
  4. Set the interface to transparent mode.

Answer(s): C






Post your Comments and Discuss Cisco 300-710 exam dumps with other Community members:

Join the 300-710 Discussion