Free 300-710 Exam Braindumps
Securing Networks with Cisco Firepower (300-710 SNCF) Questions 166–170 (page: 35)

Updated On: 10-Feb-2026

A network administrator is configuring a BVI interface on a routed FTD. The administrator wants to isolate traffic on the interfaces connected to the bridge group and not have the FTD route this traffic using the routing table.
What must be configured?

  1. A new VRF must be created for the BVI interface
  2. An IP address must be configured on the BVI
  3. IP routing must be removed from the physical interfaces connected to the BVI
  4. The BVI interface must be configured for transparent mode

Answer(s): A



Which two features can be used with Cisco Secure Firewall Threat Defense remote access VPN? (Choose two.)

  1. enable Duo two-factor authentication using LDAPS
  2. support for Cisco Secure Firewall 4100 Series in cluster mode
  3. SSL remote access VPN supports port sharing with other Cisco FTD features using SSL port 443
  4. use of license utilization for zero-touch network deployment
  5. support for Rapid Threat Containment using RADIUS dynamic authorization

Answer(s): A,E



Which rule action is only available in Snort 3?

  1. Pass
  2. Generate
  3. Alert
  4. Rewrite

Answer(s): C


Reference:

https://www.cisco.com/c/en/us/td/docs/security/firepower/710/snort3/config-guide/snort3- configuration-guide-v71/tuning-intrusion-policies.html



An engineer is configuring a Cisco Secure Firewall Threat Defense device and wants to create a new intrusion rule based on the detection of a specific pattern in the data payload for a new zero-day exploit.
Which keyword type must be used to add a line that identifies the author of the rule and the date it was created?

  1. gtp_info
  2. metadata
  3. reference
  4. content

Answer(s): B


Reference:

https://www.cisco.com/c/en/us/td/docs/security/firepower/601/configuration/guide/fpmc-config- guide-v601/The_Intrusion_Rule_Editor.html



A network engineer must configure IPS mode on a Secure Firewall Threat Defense device to inspect traffic and act as an IDS. The engineer already configured the passive-interface on the Secure Firewall Threat Defense device and SPAN on the switch.
What must be configured next by the engineer?

  1. intrusion policy on the Secure Firewall Threat Defense device
  2. active SPAN port on the switch
  3. DHCP on the switch
  4. active interface on the Secure Firewall Threat Defense device

Answer(s): A



Viewing page 35 of 84
Viewing questions 171 - 175 out of 466 questions


Post your Comments and Discuss Cisco 300-710 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!