Free 300-710 Exam braindumps download (300-710 exam dumps Free)

QUESTION: 111

An organization wants to secure traffic from their branch office to the headquarters building using Cisco Firepower devices. They want to ensure that their Cisco Firepower devices are not wasting resources on inspecting the VPN traffic.
What must be done to meet these requirements?

Configure the Cisco Firepower devices to bypass the access control policies for VPN traffic.
Tune the intrusion policies in order to allow the VPN traffic through without inspection.
Configure the Cisco Firepower devices to ignore the VPN traffic using prefilter policies.
Enable a flexconfig policy to re-classify VPN traffic so that it no longer appears as interesting traffic.

Answer(s): A

Reference:

https://www.cisco.com/c/en/us/td/docs/security/firepower/640/fdm/fptd-fdm-config-guide-640/fptd-fdm- ravpn.html

Show Answer Next Question

QUESTION: 112

An administrator is working on a migration from Cisco ASA to the Cisco FTD appliance and needs to test the rules without disrupting the traffic.
Which policy type should be used to configure the ASA rules during this phase of the migration?

Prefilter
Intrusion
Access Control
Identity

Answer(s): A

Reference:

https://www.cisco.com/c/en/us/td/docs/security/firepower/migration-tool/migration-guide/ASA2FTD-with-FP- Migration-Tool/b_Migration_Guide_ASA2FTD_chapter_01011.html

Show Answer Next Question

QUESTION: 113

A network administrator is seeing an unknown verdict for a file detected by Cisco FTD. Which malware policy configuration option must be selected in order to further analyze the file in the Talos cloud?

malware analysis
dynamic analysis
sandbox analysis
Spero analysis

Answer(s): B

Reference:

https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/ Reference_a_wrapper_Chapter_topic_here.html

Show Answer Next Question

QUESTION: 114

An engineer has been tasked with providing disaster recovery for an organization's primary Cisco FMC. What must be done on the primary and secondary Cisco FMCs to ensure that a copy of the original corporate policy is available if the primary Cisco FMC fails?

Restore the primary Cisco FMC backup configuration to the secondary Cisco FMC device when the primary device fails.
Connect the primary and secondary Cisco FMC devices with Category 6 cables of not more than 10 meters in length.
Configure high-availability in both the primary and secondary Cisco FMCs.
Place the active Cisco FMC device on the same trusted management network as the standby device.

Answer(s): C

Reference:

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/ firepower_management_center_high_availability.html

Show Answer Next Question

QUESTION: 115

An engineer is attempting to add a new FTD device to their FMC behind a NAT device with a NAT ID of ACME001 and a password of Cisco0391521107.
Which command set must be used in order to accomplish this?

configure manager add<FMC IP> <registration key>ACME001
configure manager add ACME001<registration key> <FMC IP>
configure manager add <FMC IP>ACME001<registration key>
configure manager add DONTRESOLVE <FMC IP> AMCE001<registration key>

Answer(s): A

Reference:

https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118596-configure-firesight- 00.html

Show Answer Next Question

Free 300-710 Exam Braindumps Securing Networks with Cisco Firepower (300-710 SNCF) Questions 111–115 (page: 24)

QUESTION: 111

Reference:

QUESTION: 112

Reference:

QUESTION: 113

Reference:

QUESTION: 114

Reference:

QUESTION: 115

Reference:

Free 300-710 Exam Braindumps
Securing Networks with Cisco Firepower (300-710 SNCF) Questions 111–115 (page: 24)