A network engineer wants to disable the HTTP response page and interactive blocking of the entire access control policy in Cisco Secure Firewall Management Center. What must be selected in Block Response Page and Interactive Block Response Page?
Answer(s): D
In Cisco Secure Firewall Management Center, to disable the HTTP response page and interactive blocking of the entire access control policy, the engineer must select None for both the Block Response Page and Interactive Block Response Page settings. This configuration prevents the firewall from displaying any HTTP response page or offering interactive blocking features when a policy action is triggered, such as blocking traffic based on access control rules.
An engineer must reconfigure an NTP server on an IPSv device that is managed by using Cisco Secure Firewall Management Center. The engineer verified secure communications between Secure FirewallManagement Center and the NTP server. How must the engineer perform the reconfiguration in Secure Firewall Management Center?
Answer(s): C
To reconfigure an NTP server for an IPSv device managed via Cisco Secure Firewall Management Center (FMC), the engineer must modify the Platform Settings Policy assigned to the device. In this case, the Threat Defense Settings Policy under Platform Settings contains the configuration for Time Synchronization (NTP).From this section, the engineer can add, modify, or remove NTP servers used by the managed device. After the changes are made, the updated policy is deployed to the device to take effect.
A network administrator is setting up a Cisco Secure Firewall Threat Defense to peer via BGP with two ISPs. The administrator wants traffic to certain IP ranges to prefer to come in one ISP instead of the other. What must be configured on the BGP connection to the peer to help facilitate the requirement?
A route map is the appropriate mechanism to control BGP routing preferences. It allows the administrator to define policies that can influence route selection by modifying attributes such as weight, local preference, or AS path. To ensure traffic to specific IP ranges prefers one ISP over another, the administrator can configure a route map to manipulate BGP attributes for those routes, such as increasing the local preference for the desired ISP.
A network administrator is configuring an instance of Cisco Secure Firewall Threat Defense, which is registered to Cisco Secure Firewall Management Center, to prevent internal users from downloading executable files from the internet. What must be created and configured by the administrator to meet the requirement?
To prevent internal users from downloading executable files from the internet, the administrator needs to configure an access control policy rule that:1. Allows users to access the internet.2. Applies a file policy to the rule that blocks executable file downloads.In Cisco Secure Firewall Threat Defense, file policies are used to inspect file types being transmitted and take appropriate actions, such as blocking or allowing files based on their type. The file policy must be assigned to an access policy rule to enforce it for specific traffic.
DRAG DROPRefer to the exhibit. An engineer configures a NAT rule allowing clients to use the internet only if clients are located on the directly connected internal network. Dynamic auto PAT must be configured. Drag and drop the NAT rules from the left onto the corresponding targets on the right. Not all options are used.Select and Place:
Answer(s): A
NAT Rule: auto NATauto NAT simplifies NAT configuration by automatically applying it to a network object.Type: dynamic dynamic as this configuration involves Dynamic Auto PAT (Port Address Translation).Source Interface Objects: inside_zone inside_zone is the source zone where the clients reside.Destination Interface Objects: outside_zone outside_zone is the destination zone for internet access.Original Source: obj_192.168.1.0_24obj_192.168.1.0_24 represents the internal network to be NATed.Translated Source: destination interface IPThis ensures the source IP is dynamically translated to the IP address of the destination interface for outbound traffic.
Post your Comments and Discuss Cisco 300-710 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 300-710 content, but please register or login to continue.