Free 300-710 Exam Braindumps
Securing Networks with Cisco Firepower (300-710 SNCF) Questions 116–120 (page: 25)

Updated On: 10-Feb-2026



Refer to the exhibit. An organization has an access control rule with the intention of sending all social media traffic for inspection. After using the rule for some time, the administrator notices that the traffic is not being inspected, but is being automatically allowed.
What must be done to address this issue?

  1. Add the social network URLs to the block list.
  2. Change the intrusion policy to connectivity over security.
  3. Modify the selected application within the rule.
  4. Modify the rule action from trust to allow.

Answer(s): D



A user within an organization opened a malicious file on a workstation which in turn caused a ransomware attack on the network.
What should be configured within the Cisco FMC to ensure the file is tested for viruses on a sandbox system?

  1. Spero analysis
  2. capacity handling
  3. local malware analysis
  4. dynamic analysis

Answer(s): D


Reference:

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/ file_policies_and_advanced_malware_protection.html#ID-2199-000005d8



An engineer configures a network discovery policy on Cisco FMC. Upon configuration, it is noticed that excessive and misleading events are filling the database and overloading the Cisco FMC. A monitored NAT device is executing multiple updates of its operating system in a short period of time.
What configuration change must be made to alleviate this issue?

  1. Exclude load balancers and NAT devices.
  2. Leave default networks.
  3. Increase the number of entries on the NAT device.
  4. Change the method to TCP/SYN.

Answer(s): A


Reference:

https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/ Network_Discovery_Policies.html



A network administrator notices that remote access VPN users are not reachable from inside the network. It is determined that routing is configured correctly; however, return traffic is entering the firewall but not leaving it.
What is the reason for this issue?

  1. A manual NAT exemption rule does not exist at the top of the NAT table
  2. An external NAT IP address is not configured
  3. An external NAT IP address is configured to match the wrong interface
  4. An object NAT exemption rule does not exist at the top of the NAT table

Answer(s): A



An administrator is creating interface objects to better segment their network but is having trouble adding interfaces to the objects.
What is the reason for this failure?

  1. The interfaces are being used for NAT for multiple networks
  2. The administrator is adding interfaces of multiple types
  3. The administrator is adding an interface that is in multiple zones
  4. The interfaces belong to multiple interface groups

Answer(s): B



Viewing page 25 of 84
Viewing questions 121 - 125 out of 466 questions


Post your Comments and Discuss Cisco 300-710 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!