Free 300-710 Exam Braindumps
Securing Networks with Cisco Firepower (300-710 SNCF) Questions 146–150 (page: 31)

Updated On: 10-Feb-2026

An administrator is adding a QoS policy to a Cisco FTD deployment.
When a new rule is added to the policy and QoS is applied on "Interfaces in Destination Interface Objects", no interface objects are available.
What is the problem?

  1. The FTD is out of available resources for use, so QoS cannot be added.
  2. The network segments that the interfaces are on do not have contiguous IP space.
  3. A conflict exists between the destination interface types that is preventing QoS from being added.
  4. QoS is available only on routed interfaces, and this device is in transparent mode.

Answer(s): D



A network administrator wants to block traffic to a known malware site at https:/www.badsite.com and all subdomains while ensuring no packets from any internal client are sent to that site.
Which type of policy must the network administrator use to accomplish this goal?

  1. Access Control policy with URL filtering
  2. Prefilter policy
  3. DNS policy
  4. SSL policy

Answer(s): C



A security engineer must configure policies for a recently deployed Cisco FTD. The security policy for the company dictates that when five or more connections from external sources are initiated within 2 minutes, there is cause for concern.
Which type of policy must be configured in Cisco FMC to generate an alert when this condition is triggered?

  1. application detector
  2. access control
  3. correlation
  4. intrusion

Answer(s): C


Reference:

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/correlation_policies.html



Which default action setting in a Cisco FTD Access Control Policy allows all traffic from an undefined application to pass without Snort inspection?

  1. Network Discovery Only
  2. Inherit from Base Policy
  3. Intrusion Prevention
  4. Trust All Traffic

Answer(s): D



A security engineer needs to configure a network discovery policy on a Cisco FMC appliance and prevent excessive network discovery events from overloading the FMC database? Which action must be taken to accomplish this task?

  1. Monitor only the default IPv4 and IPv6 network ranges.
  2. Configure NetFlow exporters for monitored networks.
  3. Change the network discovery method to TCP/SYN.
  4. Exclude load balancers and NAT devices in the policy.

Answer(s): D


Reference:

https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide- v60/Network_Discovery_Policies.html



Viewing page 31 of 84
Viewing questions 151 - 155 out of 466 questions


Post your Comments and Discuss Cisco 300-710 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!