Month End Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: simple70

Pass the Cisco CCNP Security 300-710 Questions and answers with CertsForce

Viewing page 6 out of 12 pages
Viewing questions 51-60 out of questions
Questions # 51:

Refer to the exhibit.

What must be done to fix access to this website while preventing the same communication to all other websites?

Options:

A.

Create an intrusion policy rule to have Snort allow port 80 to only 172.1.1 50.


B.

Create an access control policy rule to allow port 80 to only 172.1.1 50.


C.

Create an intrusion policy rule to have Snort allow port 443 to only 172.1.1.50


D.

Create an access control policy rule to allow port 443 to only 172.1.1 50


Expert Solution
Questions # 52:

Which action must be taken to configure an isolated bridge group for IRB mode on a Cisco Secure Firewall device?

Options:

A.

Add the restricted segment to the ACL.


B.

Leave BVI interface name empty.


C.

Define the NAT pool for the blocked traffic.


D.

Remove the route from the routing table.


Expert Solution
Questions # 53:

A network engineer must provide redundancy between two Cisco FTD devices. The redundancy configuration must include automatic configuration, translation, and connection updates. After the initial configuration of the two appliances, which two steps must be taken to proceed with the redundancy configuration? (Choose two.)

Options:

A.

Configure the virtual MAC address on the failover link.


B.

Disable hellos on the inside interface.


C.

Configure the standby IP addresses.


D.

Ensure the high availability license is enabled.


E.

Configure the failover link with stateful properties.


Expert Solution
Questions # 54:

An administrator is configuring a new report template off. of a saved search within Cisco Secure Firewall Management Centre. The goal is to use the malware analysis report template, but use a different type saved search as the basis. The report is not working. What must be considered when configuring this report template?

Options:

A.

Saved searches can be used for the same report template only


B.

Saved searches are available freely for all report templates within the same domain.


C.

Saved searches from a different report template must be used.


D.

Saved searches must be renamed before using for different report template.


Expert Solution
Questions # 55:

An engineer is configuring a second Cisco FMC as a standby device but is unable to register with the active unit. What is causing this issue?

Options:

A.

The primary FMC currently has devices connected to it.


B.

The code versions running on the Cisco FMC devices are different


C.

The licensing purchased does not include high availability


D.

There is only 10 Mbps of bandwidth between the two devices.


Expert Solution
Questions # 56:

An administrator must fix a network problem whereby traffic from the inside network to a webserver is not getting through an instance of Cisco Secure Firewall Threat Defense. Which command must the administrator use to capture packets to the webserver that are dropped by Secure Firewall Throat Defense and resold the issue?

Options:

A.

capture CAP int OUTSIDE match ip any host WEBSERVERIP


B.

capture CAP type asp-drop all headers-only


C.

capture CAP int INSIDE match ip any host WEBSERVERIP


D.

capture CAP int INSIDE match tcp any 80 host WEBSERVERlP 80


Expert Solution
Questions # 57:

Within an organization's high availability environment where both firewalls are passing traffic, traffic must be segmented based on which department it is destined for. Each department is situated on a different LAN. What must be configured to meet these requirements?

Options:

A.

span EtherChannel clustering


B.

redundant interfaces


C.

high availability active/standby firewalls


D.

multi-instance firewalls


Expert Solution
Questions # 58:

An engineer wants to perform a packet capture on the Cisco FTD to confirm that the host using IP address 192 168.100.100 has the MAC address of 0042 7734.103 to help troubleshoot aconnectivity issue What is the correct tcpdump command syntax to ensure that the MAC address appears in the packet capture output?

Options:

A.

-nm src 192.168.100.100


B.

-ne src 192.168.100.100


C.

-w capture.pcap -s 1518 host 192.168.100.100 mac


D.

-w capture.pcap -s 1518 host 192.168.100.100 ether


Expert Solution
Questions # 59:

What is a behavior of a Cisco FMC database purge?

Options:

A.

User login and history data are removed from the database if the User Activity check box is selected.


B.

Data can be recovered from the device.


C.

The appropriate process is restarted.


D.

The specified data is removed from Cisco FMC and kept for two weeks.


Expert Solution
Questions # 60:

An administrator receives reports that users cannot access a cloud-hosted web server. The access control policy was recently updated with several new policy additions and URL filtering. What must be done to troubleshoot the issue and restore access without sacrificing the organization's security posture?

Options:

A.

Create a new access control policy rule to allow ports 80 and 443 to the FQDN of the web server.


B.

Identify the blocked traffic in the Cisco FMC connection events to validate the block, and modify the policy to allow the traffic to the web server.


C.

Verify the blocks using the packet capture tool and create a rule with the action monitor for the traffic.


D.

Download a PCAP of the traffic attempts to verify the blocks and use the flexconfig objects to create a rule that allows only the required traffic to the destination server.


Expert Solution
Viewing page 6 out of 12 pages
Viewing questions 51-60 out of questions