Free 300-710 Exam Braindumps
Securing Networks with Cisco Firepower (300-710 SNCF) Questions 151–155 (page: 32)

Updated On: 10-Feb-2026

An organization is installing a new Cisco FTD appliance in the network. An engineer is tasked with configuring access between two network segments within the same IP subnet.
Which step is needed to accomplish this task?

  1. Specify a name for the bridge group.
  2. Assign an IP address to the Bridge Virtual Interface.
  3. Permit BPDU packets to prevent loops.
  4. Add a separate bridge group for each segment.

Answer(s): B



An engineer defines a new rule while configuring an Access Control Policy. After deploying the policy, the rule is not working as expected and the hit counters associated with the rule are showing zero.
What is causing this error?

  1. An incorrect application signature was used in the rule.
  2. The wrong source interface for Snort was selected in the rule.
  3. The rule was not enabled after being created.
  4. Logging is not enabled for the rule.

Answer(s): A



An administrator needs to configure Cisco FMC to send a notification email when a data transfer larger than 10 MB is initiated from an internal host outside of standard business hours.
Which Cisco FMC feature must be configured to accomplish this task?

  1. file and malware policy
  2. application detector
  3. correlation policy
  4. intrusion policy

Answer(s): C


Reference:

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/correlation_policies.html



An engineer is troubleshooting HTTP traffic to a web server using the packet capture tool on Cisco FMC. When reviewing the captures, the engineer notices that there are a lot of packets that are not sourced from or destined to the web server being captured. How can the engineer reduce the strain of capturing packets for irrelevant traffic on the Cisco FTD device?

  1. Use an access-list within the packet capture to permit only HTTP traffic to and from the web server.
  2. Use the host filter in the packet capture to capture traffic to or from a specific host.
  3. Use the ­c option to restrict the packet capture to only the first 100 packets.
  4. Redirect the packet capture output to a .pcap file that can be opened with Wireshark.

Answer(s): B



Which process should be checked when troubleshooting registration issues between Cisco FMC and managed devices to verify that secure communication is occurring?

  1. fpcollect
  2. dhclient
  3. sfrmgr
  4. sftunnel

Answer(s): D


Reference:

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/215540-configure-verify-and- troubleshoot-firep.html



Viewing page 32 of 84
Viewing questions 156 - 160 out of 466 questions


Post your Comments and Discuss Cisco 300-710 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!