Halloween Sale Special Limited Time 75% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: CFsave75

Pass the Cisco CCNP Security 300-710 Questions and answers with CertsForce

Viewing page 9 out of 14 pages
Viewing questions 81-90 out of questions
Questions # 81:

A network administrator is configuring an FTD in transparent mode. A bridge group is set up and an access policy has been set up to allow all IP traffic. Traffic is not passing through the FTD. What additional configuration is needed?

Options:

A.

The security levels of the interfaces must be set.


B.

A default route must be added to the FTD.


C.

An IP address must be assigned to the BVI.


D.

A mac-access control list must be added to allow all MAC addresses.


Expert Solution
Questions # 82:

Which command is run at the CLI when logged in to an FTD unit, to determine whether the unit is managed locally or by a remote FMC server?

Options:

A.

system generate-troubleshoot


B.

show configuration session


C.

show managers


D.

show running-config | include manager


Expert Solution
Questions # 83:

A network engineer must provide a high-level statistical summary of a Cisco Secure Firewall Threat Defense device. The organization is approaching its peak season, so network downtime must be minimized. Which type of report must the network engineer use?

Options:

A.

Malware


B.

SNMP


C.

Risk


D.

Host


Expert Solution
Questions # 84:

An administrator Is setting up a Cisco PMC and must provide expert mode access for a security engineer. The engineer Is permitted to use only a secured out-of-band network workstation with a static IP address to access the Cisco FMC. What must be configured to enable this access?

Options:

A.

Enable SSH and define an access list.


B.

Enable HTTP and define an access list.


C.

Enable SCP under the Access List section.


D.

Enable HTTPS and SNMP under the Access List section.


Expert Solution
Questions # 85:

An engineer must configure a new identity policy in Cisco Firepower Management Center. Active authentication must be configured by using a Kerberos connection. Which two realms must be configured? (Choose two.)

Options:

A.

Directory password


B.

Active directory join password


C.

Active directory primary domain


D.

Active directory join username


E.

Directory username


Expert Solution
Questions # 86:

Question # 86

Refer to the exhibit An engineer is modifying an access control pokey to add a rule to inspect all DNS traffic that passes through the firewall After making the change and deploying thepokey they see that DNS traffic is not bang inspected by the Snort engine What is the problem?

Options:

A.

The rule must specify the security zone that originates the traffic


B.

The rule must define the source network for inspection as well as the port


C.

The action of the rule is set to trust instead of allow.


D.

The rule is configured with the wrong setting for the source port


Expert Solution
Questions # 87:

What are the minimum requirements to deploy a managed device inline?

Options:

A.

inline interfaces, security zones, MTU, and mode


B.

passive interface, MTU, and mode


C.

inline interfaces, MTU, and mode


D.

passive interface, security zone, MTU, and mode


Expert Solution
Questions # 88:

What is the result of specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?

Options:

A.

The rate-limiting rule is disabled.


B.

Matching traffic is not rate limited.


C.

The system rate-limits all traffic.


D.

The system repeatedly generates warnings.


Expert Solution
Questions # 89:

An engineermustconfigure a Cisco FMC dashboard in a multidomain deployment Which action must the engineer take to edit a report template from an ancestor domain?

Options:

A.

Add it as a separate widget.


B.

Copy it to the current domain


C.

Assign themselves ownership of it


D.

Change the document attributes.


Expert Solution
Questions # 90:

A company is in the process of deploying intrusion protection with Cisco FTDs managed by a Cisco FMC. Which action must be selected to enable fewer rules detect only critical conditions and avoid false positives?

Options:

A.

Connectivity Over Security


B.

Balanced Security and Connectivity


C.

Maximum Detection


D.

No Rules Active


Expert Solution
Viewing page 9 out of 14 pages
Viewing questions 81-90 out of questions