Halloween Sale Special Limited Time 75% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: CFsave75

Pass the Cisco CCNP Security 300-710 Questions and answers with CertsForce

Viewing page 5 out of 14 pages
Viewing questions 41-50 out of questions
Questions # 41:

An administrator is configuring a new report template off. of a saved search within Cisco Secure Firewall Management Centre. The goal is to use the malware analysis report template, but use a different type saved search as the basis. The report is not working. What must be considered when configuring this report template?

Options:

A.

Saved searches can be used for the same report template only


B.

Saved searches are available freely for all report templates within the same domain.


C.

Saved searches from a different report template must be used.


D.

Saved searches must be renamed before using for different report template.


Expert Solution
Questions # 42:

An engineer integrates Cisco FMC and Cisco ISE using pxGrid. Which role is assigned for Cisco FMC?

Options:

A.

controller


B.

publisher


C.

client


D.

server


Expert Solution
Questions # 43:

An engineer is investigating connectivity problems on Cisco Firepower for a specific SGT. Which command allows the engineer to capture real packets that pass through the firewall using an SGT of 64?

Options:

A.

capture CAP type inline-tag 64 match ip any any


B.

capture CAP match 64 type inline-tag ip any any


C.

capture CAP headers-only type inline-tag 64 match ip any any


D.

capture CAP buffer 64 match ip any any


Expert Solution
Questions # 44:

An engineer is working on a LAN switch and has noticed that its network connection to the mime Cisco IPS has gone down Upon troubleshooting it is determined that the switch is working as expected What must have been implemented for this failure to occur?

Options:

A.

The upstream router has a misconfigured routing protocol


B.

Link-state propagation is enabled


C.

The Cisco IPS has been configured to be in fail-open mode


D.

The Cisco IPS is configured in detection mode


Expert Solution
Questions # 45:

IT management is asking the network engineer to provide high-level summary statistics of the Cisco FTD appliance in the network. The business is approaching a peak season so the need to maintain business uptime is high. Which report type should be used to gather this information?

Options:

A.

Malware Report


B.

Standard Report


C.

SNMP Report


D.

Risk Report


Expert Solution
Questions # 46:

A network administrator wants to configure a Cisco Secure Firewall Threat Defense instance managed by Cisco Secure Firewall Management Center to block traffic to known cryptomning networks. Which system settings must the administrator configure in Secure Firewall Management Center to meet the requirement?

Options:

A.

Access Policy. Security Intelligence


B.

Malware Policy.


C.

Rules Intrusion Policy. Security Intelligence


D.

Access Policy. Rules


Expert Solution
Questions # 47:

A network administrator is configuring a site-to-site IPsec VPN to a router sitting behind a Cisco FTD. The administrator has configured an access policy to allow traffic to this device on UDP 500, 4500, and ESP VPN traffic is not working. Which action resolves this issue?

Options:

A.

Set the allow action in the access policy to trust.


B.

Enable IPsec inspection on the access policy.


C.

Modify the NAT policy to use the interface PAT.


D.

Change the access policy to allow all ports.


Expert Solution
Questions # 48:

A network administrator notices that SI events are not being updated The Cisco FTD device is unable to load all of the SI event entries and traffic is not being blocked as expected. What must be done to correct this issue?

Options:

A.

Restart the affected devices in order to reset the configurations


B.

Manually update the SI event entries to that the appropriate traffic is blocked


C.

Replace the affected devices with devices that provide more memory


D.

Redeploy configurations to affected devices so that additional memory is allocated to the SI module


Expert Solution
Questions # 49:

An administrator must fix a network problem whereby traffic from the inside network to a webserver is not getting through an instance of Cisco Secure Firewall Threat Defense. Which command must the administrator use to capture packets to the webserver that are dropped by Secure Firewall Throat Defense and resold the issue?

Options:

A.

capture CAP int OUTSIDE match ip any host WEBSERVERIP


B.

capture CAP type asp-drop all headers-only


C.

capture CAP int INSIDE match ip any host WEBSERVERIP


D.

capture CAP int INSIDE match tcp any 80 host WEBSERVERlP 80


Expert Solution
Questions # 50:

A network administrator is trying to convert from LDAP to LDAPS for VPN user authentication on a Cisco FTD. Which action must be taken on the Cisco FTD objects to accomplish this task?

Options:

A.

Add a Key Chain object to acquire the LDAPS certificate.


B.

Create a Certificate Enrollment object to get the LDAPS certificate needed.


C.

Identify the LDAPS cipher suite and use a Cipher Suite List object to define the Cisco FTD connection requirements.


D.

Modify the Policy List object to define the session requirements for LDAPS.


Expert Solution
Viewing page 5 out of 14 pages
Viewing questions 41-50 out of questions