Pass the Cisco CCNP Security 300-710 Questions and answers with CertsForce

Viewing page 5 out of 10 pages
Viewing questions 41-50 out of questions
Questions # 41:

Which command is run at the CLI when logged in to an FTD unit, to determine whether the unit is managed locally or by a remote FMC server?

Options:

A.

system generate-troubleshoot


B.

show configuration session


C.

show managers


D.

show running-config | include manager


Expert Solution
Questions # 42:

Which two packet captures does the FTD LINA engine support? (Choose two.)

Options:

A.

Layer 7 network ID


B.

source IP


C.

application ID


D.

dynamic firewall importing


E.

protocol


Expert Solution
Questions # 43:

Which group within Cisco does the Threat Response team use for threat analysis and research?

Options:

A.

Cisco Deep Analytics


B.

OpenDNS Group


C.

Cisco Network Response


D.

Cisco Talos


Expert Solution
Questions # 44:

Which Cisco Firepower feature is used to reduce the number of events received in a period of time?

Options:

A.

rate-limiting


B.

suspending


C.

correlation


D.

thresholding


Expert Solution
Questions # 45:

Which CLI command is used to control special handling of ClientHello messages?

Options:

A.

system support ssl-client-hello-tuning


B.

system support ssl-client-hello-display


C.

system support ssl-client-hello-force-reset


D.

system support ssl-client-hello-enabled


Expert Solution
Questions # 46:

Which command-line mode is supported from the Cisco Firepower Management Center CLI?

Options:

A.

privileged


B.

user


C.

configuration


D.

admin


Expert Solution
Questions # 47:

IT management is asking the network engineer to provide high-level summary statistics of the Cisco FTD appliance in the network. The business is approaching a peak season so the need to maintain business uptime is high. Which report type should be used to gather this information?

Options:

A.

Malware Report


B.

Standard Report


C.

SNMP Report


D.

Risk Report


Expert Solution
Questions # 48:

What is the RTC workflow when the infected endpoint is identified?

Options:

A.

Cisco ISE instructs Cisco AMP to contain the infected endpoint.


B.

Cisco ISE instructs Cisco FMC to contain the infected endpoint.


C.

Cisco AMP instructs Cisco FMC to contain the infected endpoint.


D.

Cisco FMC instructs Cisco ISE to contain the infected endpoint.


Expert Solution
Questions # 49:

An engineer is setting up a remote access VPN on a Cisco FTD device and wants to define which traffic gets sent over the VPN tunnel. Which named object type in Cisco FMC must be used to accomplish this task?

Options:

A.

split tunnel


B.

crypto map


C.

access list


D.

route map


Expert Solution
Questions # 50:

Question # 50

Refer to the exhibit. An engineer must import three network objects into the Cisco Secure Firewall Management Center by using a CSV file. Which header must be configured in the CSV file to accomplish the task?

Options:

A.

NAME;DESCRIPTION;TYPE;VALUE;LOOKUP;


B.

Name; Description; Type;Value;Lookup;


C.

Name; Description; Type;Value;DN;


D.

NAME;DESCRIPTION; TYPE;VALUE;DN;


Expert Solution
Viewing page 5 out of 10 pages
Viewing questions 41-50 out of questions