Free 300-710 Exam Braindumps
Securing Networks with Cisco Firepower (300-710 SNCF) Questions 161–165 (page: 34)

Updated On: 10-Feb-2026

A security engineer is deploying Cisco Secure Endpoint to detect a zero day malware attack with an SHA-256 hash of 47ea931f3e9dc23ec0b0885a80663e30ea013d493f8e88224b570a0464084628.
What must be configured in Cisco Secure Endpoint to enable the application to take action based on this hash?

  1. access control rule
  2. correlation policy
  3. transform set
  4. custom detection list

Answer(s): D


Reference:

https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/215176-configure-a-simple- custom-detection-list.pdf



A security engineer must create a malware and file policy on a Cisco Secure Firewall Threat Defense device. The solution must ensure that PDF, DOCX, and XLSX files are not sent to Cisco Secure Malware Analytics.
What must be configured to meet the requirements?

  1. Spero analysis
  2. local malware analysis
  3. capacity handling
  4. dynamic analysis

Answer(s): B



Encrypted Visibility Engine (EVE) is enabled under which tab on an access control policy in Cisco Secure Firewall Management Center?

  1. Network Analysis Policy
  2. SSL
  3. Advanced
  4. Security Intelligence

Answer(s): C


Reference:

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/snort/720/ snort3-configuration-guide-v72/m_encrypted-visibility-engine.pdf



An engineer is configuring a Cisco Secure Firewall Threat Defense device managed by Cisco Secure Firewall Management Center. The device must have SSH enabled and be accessible from the inside interface for remote administration.
Which type of policy must the engineer configure to accomplish this?

  1. platform settings
  2. access control
  3. prefilter
  4. identity

Answer(s): A



What is the result when two users modify a VPN policy at the same time on a Cisco Secure Firewall Management Center managed device?

  1. Both users can edit the policy and the last saved configuration persists.
  2. The changes from both users will be merged together into the policy.
  3. The first user locks the configuration when selecting edit on the policy.
  4. The system prevents modifications to the policy by multiple users.

Answer(s): A

Explanation:

Two users must not edit a remote access VPN policy at the same time; however, the web interface does not prevent simultaneous editing. If this occurs, the last saved configuration persists.


Reference:

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device- config/710/management-center-device-config-71/vpn-remote-access.html



Viewing page 34 of 84
Viewing questions 166 - 170 out of 466 questions


Post your Comments and Discuss Cisco 300-710 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!