Free 300-710 Exam braindumps download (300-710 exam dumps Free)

QUESTION: 121

An organization is using a Cisco FTD and Cisco ISE to perform identity-based access controls. A network administrator is analyzing the Cisco FTD events and notices that unknown user traffic is being allowed through the firewall. How should this be addressed to block the traffic while allowing legitimate user traffic?

Modify the Cisco ISE authorization policy to deny this access to the user
Modify Cisco ISE to send only legitimate usernames to the Cisco FTD
Add the unknown user in the Access Control Policy in Cisco FTD
Add the unknown user in the Malware & File Policy in Cisco FTD

Answer(s): C

Reference:

https://www.cisco.com/c/en/us/td/docs/security/firepower/640/fdm/fptd-fdm-config-guide-640/fptd- fdm-identity.html#concept_655B055575E04CA49B10186DEBDA301A

Show Answer Next Question

QUESTION: 122

A company is in the process of deploying intrusion prevention with Cisco FTDs managed by a Cisco FMC. An engineer must configure policies to detect potential intrusions but not block the suspicious traffic Which action accomplishes this task?

Configure IPS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by checking the "Drop when inline" option.
Configure IPS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by unchecking the "Drop when inline" option.
Configure IDS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by checking the "Drop when inline" option.
Configure IDS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by unchecking the "Drop when inline" option.

Answer(s): D

Show Answer Next Question

QUESTION: 123

An engineer is using the configure manager add <FMC IP> Cisc404225383 command to add a new Cisco FTD device to the Cisco FMC; however, the device is not being added.
Why is this occurring?

DONOTRESOLVE must be added to the command
The IP address used should be that of the Cisco FTD, not the Cisco FMC
The registration key is missing from the command
The NAT ID is required since the Cisco FMC is behind a NAT device

Answer(s): C

Show Answer Next Question

QUESTION: 124

An engineer is configuring Cisco FMC and wants to allow multiple physical interfaces to be part of the same VLAN. The managed devices must be able to perform Layer 2 switching between interfaces, including sub- interfaces.
What must be configured to meet these requirements?

inter-chassis clustering VLAN
Cisco ISE Security Group Tag
interface-based VLAN switching
integrated routing and bridging

Answer(s): D

Show Answer Next Question

QUESTION: 125

An organization does not want to use the default block page when blocking HTTP traffic in Cisco Secure Firewall Management Center. The organization wants to include information about its policies and procedures to help educate the users whenever a block occurs.
Which two steps must be taken to meet these requirements? (Choose two.)

Edit the HTTP request handling in the access control policy to customized block
Modify the system-provided block page result using Python
Create HTML code with the information for the policies and procedures
Change the HTTP response in the access control policy to custom
Write CSS code with the information for the policies and procedures

Answer(s): C,D

Show Answer Next Question

Free 300-710 Exam Braindumps Securing Networks with Cisco Firepower (300-710 SNCF) Questions 121–125 (page: 26)

QUESTION: 121

Reference:

QUESTION: 122

QUESTION: 123

QUESTION: 124

QUESTION: 125

Free 300-710 Exam Braindumps
Securing Networks with Cisco Firepower (300-710 SNCF) Questions 121–125 (page: 26)