What is the result a specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?
Answer(s): B
https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/quality_of_service_qos.pdf
An engineer must configure a new identity policy in Cisco Firepower Management Center. Active authentication must be configured by using a Kerberos connection. Which two realms must be configured? (Choose two.)
Answer(s): B,E
To enable Kerberos-based Active Authentication in Cisco FMC, the system must join the Active Directory domain. This requires credentials with permissions to join:The Active Directory join username andThe Active Directory join password.These allow FMC to authenticate users via Kerberos by establishing trust with the AD domain.
DRAG DROPRefer to the exhibit. An engineer must create a QoS policy in Cisco Firepower Management Center to limit HTTP and HTTPS traffic from users in the HR department. The upload and download limit of the HTTP and HTTPS traffic must be set to 5 Mb/s. Drag and drop the values from the left onto the corresponding settings on the right.Select and Place:
Answer(s): A
Name: Choose a meaningful name, here "HTTP-HTTPS-QoS".Apply QoS On: Since traffic is shaped at the egress, this must be on destination interface objects. Download/Upload Limit: As specified in the question -- 5 Mb/s. Source Interface Networks: HR users are in 192.168.1.0/24. Destination Interface Networks: Internet-bound traffic passes through 192.168.2.0/24. Destination Ports: Limiting HTTP and HTTPS, so select HTTP-HTTPS.
An engineer must configure an ERSPAN passive interface on a Cisco Secure IPS by using the Cisco Secure Firewall Management Center. These configurations have been performed already:· Configure the passive interface.· Configure the ERSPAN IP address.Which two additional settings must be configured to complete the configuration? (Choose two.)
Answer(s): A,D
To complete the configuration of an ERSPAN passive interface on a Cisco Secure IPS using Cisco Secure Firewall Management Center, the following additional settings are required:Destination MAC: Needed to identify the intended recipient of the ERSPAN traffic.Flow ID: Uniquely identifies the ERSPAN session, which is essential for processing mirrored traffic correctly.
DRAG DROPAn engineer must create a basic access control policy in the Cisco Secure Firewall Management Center to block all traffic by default. Drag and drop the configuration actions from the left into sequence on the right.Select and Place:
This order follows the logical FMC workflow: navigate to the policy section, create a new policy, define its behavior (default action), and finally assign it to the correct device(s).
Post your Comments and Discuss Cisco 300-710 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 300-710 content, but please register or login to continue.