Weekend Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = simple70

Home
Cisco
CCNP Security
300-710
Securing Networks with Cisco Firepower (300-710 SNCF) Questions and Answers

Pass the Cisco CCNP Security 300-710 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam 300-710 Premium Access

View all detail and faqs for the 300-710 exam

Go to Exam

430 Students Passed

89% Average Score

91% Same Questions

Viewing page 1 out of 10 pages

Viewing questions 1-10 out of questions

Questions # 1:

Which group within Cisco does the Threat Response team use for threat analysis and research?

Options:

Cisco Deep Analytics

OpenDNS Group

Cisco Network Response

Cisco Talos

Answer

Explanation

[Reference: https://www.cisco.com/c/en/us/products/security/threat-response.html#~benefits, ]

Questions # 2:

How many report templates does the Cisco Firepower Management Center support?

Options:

unlimited

Answer

Explanation

[Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide- v60/Working_with_Reports.html, ]

Questions # 3:

Drag and drop the steps to restore an automatic device registration failure on the standby Cisco FMC from the left into the correct order on the right. Not all options are used.

Question # 3

Options:

Answer

Answer:

Explanation

[Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config- guide-v62/firepower_management_center_high_availability.html#id_32288, ]

Questions # 4:

After deploying a network-monitoring tool to manage and monitor networking devices in your organization, you realize that you need to manually upload an MIB for the Cisco FMC. In which folder should you upload the MIB file?

Options:

/etc/sf/DCMIB.ALERT

/sf/etc/DCEALERT.MIB

/etc/sf/DCEALERT.MIB

system/etc/DCEALERT.MIB

Answer

Explanation

[Reference: https://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa- firepower-module-user-guide-v541/Intrusion-External-Responses.pdf, ]

Questions # 5:

Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?

Options:

configure coredump packet-engine enable

capture-traffic

capture

capture WORD

Answer

Explanation

Reason: the command "capture-traffic" is used for SNORT Engine Captures. To capture a LINA Engine Capture, you use the "capture" command. Since the Lina Engine represents the actual physical interface of the device, "capture" is the only reasonable choice Reference:https://www.cisco.com/c/en/us/support/ docs/security/firepower-ngfw/212474-working-with-firepower-threat-defense-f.html#anc10

The command is

firepower# capture DMZ interface dmz trace detail match ip host 192.168.76.14 host 192.168.76.100

firepower# capture INSIDE interface inside trace detail match ip host 192.168.76.14 host 192.168.75.14

Questions # 6:

Which command-line mode is supported from the Cisco Firepower Management Center CLI?

Options:

privileged

user

configuration

admin

Answer

Explanation

[Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/660/configuration/guide/fpmc-config- guide-v66/command_line_reference.pdf, ]

Questions # 7:

Which CLI command is used to control special handling of ClientHello messages?

Options:

system support ssl-client-hello-tuning

system support ssl-client-hello-display

system support ssl-client-hello-force-reset

system support ssl-client-hello-enabled

Answer

Questions # 8:

Which two statements about deleting and re-adding a device to Cisco FMC are true? (Choose two.)

Options:

An option to re-apply NAT and VPN policies during registration is available, so users do not need to re- apply the policies after registration is completed.

Before re-adding the device in Cisco FMC, you must add the manager back in the device.

No option to delete and re-add a device is available in the Cisco FMC web interface.

The Cisco FMC web interface prompts users to re-apply access control policies.

No option to re-apply NAT and VPN policies during registration is available, so users need to re-apply the policies after registration is completed.

Answer

D, E

Explanation

[Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide- v60/Device_Management_Basics.html, ]

Questions # 9:

Which Cisco Firepower feature is used to reduce the number of events received in a period of time?

Options:

rate-limiting

suspending

correlation

thresholding

Answer

Explanation

[Reference: https://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa- firepower-module-user-guide-v541/Intrusion-Global-Threshold.html, ]

Questions # 10:

What is a functionality of port objects in Cisco FMC?