Refer to the exhibit.An engineer must import three network objects into the Cisco Secure Firewall Management Center by using a CSV file. Which header must be configured in the CSV file to accomplish the task?
Answer(s): D
Cisco FMC's CSV import for network objects requires exact uppercase headers - NAME, DESCRIPTION, TYPE, VALUE - plus the LOOKUP column to specify DNS-based (FQDN) versus IP-based objects.
An engineer must permit SSH on the inside interface of a Cisco Secure Firewall Threat Defense device. SSH is currently permitted only on the management interface. Which type of policy must the engineer configure?
Enabling SSH on a data-plane interface is controlled by the platform policy, which governs management protocols per interface rather than traffic filtering or inspection.
An engineer must configure an inline set on a Cisco Secure IPS by using the Cisco Secure Firewall Management Center. The inline set must make a copy of each packet before analyzing the packet and block any connections that do not complete the three-way handshake. These configurations have been performed already:Select and enable the interfaces that will be added to the inline set.Configure the speed and duplex.Configure the inline set and add the interfaces to the inline set.Which action completes the task?
Strict TCP Enforcement causes the sensor to hold packets until the three-way handshake completes (effectively making a copy before analysis) and to drop any connections that don't finish the handshake.
An administrator configures a Cisco Secure Firewall Threat Defense device in transparent mode. To configure the BVI, the administrator must:add a bridge-group interface configure a bridge-group IDconfigure the bridge-group interface description add bridge-group member interfacesHow must the engineer perform these actions?
Answer(s): B
In transparent mode the BVI serves as the device's Layer 3 endpoint, so once you've created the bridge-group (with its ID, description and member interfaces), you must assign an IP address to that BVI for management and inter-VLAN communication.
An engineer is deploying Cisco Secure Endpoint for the first time and on endpoint with MAC address12:34:56:78:9:AA. The engineer must make sure that during the testing phase no files are isolated and network connections must not be blocked. Which policy type must be configured to accomplish the task?
Answer(s): C
An Audit policy only monitors and logs endpoint behavior without any enforcement actions, no file isolation and no network-connection blocking, making it ideal for testing.
Post your Comments and Discuss Cisco 300-710 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 300-710 content, but please register or login to continue.