Free 300-710 Exam Braindumps
Securing Networks with Cisco Firepower (300-710 SNCF) Questions 171–175 (page: 36)

Updated On: 10-Feb-2026

A software development company hosts the website https://dev.company.com for contractors to share code for projects they are working on with internal developers. The web server is on premises and is protected by a Cisco Secure Firewall Threat Defense appliance. The network administrator is worried about someone trying to transmit infected files to internal users via this site.
Which type of policy must be associated with an access control policy to enable Cisco Secure Firewall Malware Defense to detect and block malware?

  1. SSL policy
  2. file policy
  3. network discovery policy
  4. prefilter policy

Answer(s): A



A network engineer must configure an existing firewall to have a NAT configuration. The new configuration must support more than two interfaces per context. The firewall has previously been operating in transparent mode. The Cisco Secure Firewall Threat Defense (FTD) device has been deregistered from Cisco Secure

Firewall Management Center (FMC).
Which set of configuration actions must the network engineer take next to meet the requirements?

  1. Run the configure firewall routed command from the Secure FTD device CLI, and reregister with Secure FMC.
  2. Run the configure manager add routed command from the Secure FMC CLI. and reregister with Secure FMC.
  3. Run the configure manager add routed command from the Secure FTD device CLI, and reregister with Secure FM
  4. Run the configure firewall routed command from the Secure FMC CLI. and reregister with Secure FMC.

Answer(s): A



An engineer must create an access control policy on a Cisco Secure Firewall Threat Defense device. The company has a contact center that utilizes VoIP heavily, and it is critical that this traffic is not impacted by performance issues after deploying the access control policy.
Which access control action rule must be configured to handle the VoIP traffic?

  1. block
  2. trust
  3. monitor
  4. allow

Answer(s): B



A network administrator wants to configure a Cisco Secure Firewall Threat Defense instance managed by Cisco Secure Firewall Management Center to block traffic to known cryptomining networks.
Which system settings must the administrator configure in Secure Firewall Management Center to meet the requirement?

  1. Intrusion Policy, Security Intelligence
  2. Access Policy, Security Intelligence
  3. Malware Policy, Rules
  4. Access Policy, Rules

Answer(s): B



An engineer is tasked with configuring a custom intrusion rule on Cisco Secure Firewall Management Center to detect and block the malicious traffic pattern with specific payload containing string "|04 68 72 80 87 ff ed cq fg he qm pn|".
Which action must the Engineer configure on the IPS policy?

  1. reset
  2. drop
  3. alert
  4. disable
  5. quarantine

Answer(s): B



Viewing page 36 of 84
Viewing questions 176 - 180 out of 466 questions


Post your Comments and Discuss Cisco 300-710 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!