Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Cisco
CCNP Security
300-710
Securing Networks with Cisco Firepower (300-710 SNCF) Questions and Answers

Pass the Cisco CCNP Security 300-710 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam 300-710 Premium Access

View all detail and faqs for the 300-710 exam

Go to Exam

737 Students Passed

85% Average Score

91% Same Questions

Viewing page 13 out of 13 pages

Viewing questions 121-130 out of questions

Questions # 121:

An engineer is troubleshooting HTTP traffic to a web server using the packet capture tool on Cisco FMC. When reviewing the captures, the engineer notices that there are a lot of packets that are not sourced from or destined to the web server being captured. How can the engineer reduce the strain of capturing packets for irrelevant traffic on the Cisco FTD device?

Options:

Use the host filter in the packet capture to capture traffic to or from a specific host.

Redirect the packet capture output to a. pcap file that can be opened with Wireshark.

Use the -c option to restrict the packet capture to only the first 100 packets.

Use an access-list within the packet capture to permit only HTTP traffic to and from the web server.

Answer

Questions # 122:

There is an increased amount of traffic on the network and for compliance reasons, management needs visibility into the encrypted traffic What is a result of enabling TLS'SSL decryption to allow this visibility?

Options:

It prompts the need for a corporate managed certificate

It has minimal performance impact

It is not subject to any Privacy regulations

It will fail if certificate pinning is not enforced

Answer

Questions # 123:

What is an attribute of the risk reporting capability in Cisco Secure Firewall Management Center?

Options:

Includes all domains in a multidomain system

Uses the same templates available to standard reports

Includes the current domain in a multidomain system

Uses the XML format to export all reporting

Answer

Questions # 124:

A security engineer must create a malware and file policy on a Cisco Secure Firewall Threat Defense device. The solution must ensure that PDF. DOCX, and XLSX files are not sent lo Cisco Secure Malware analytics. What must do configured to meet the requirements''

Options:

capacity handling

Spero analysis

dynamic analysis

local malware analysis

Answer

Explanation

To create a malware and file policy on a Cisco Secure Firewall Threat Defense (FTD) device that ensures PDF, DOCX, and XLSX files are not sent to Cisco Secure Malware Analytics, the security engineer must configure local malware analysis. Local malware analysis allows the FTD to inspect and analyze files locally without sending them to the cloud-based Cisco Secure Malware Analytics.

Steps to configure local malware analysis:

In FMC, navigate toPolicies > Access Control > Malware & FilePolicies.

Create a new malware and file policy or edit an existing one.

Define rules to inspect specific file types, ensuring that PDF, DOCX, and XLSX files are handled locally.

Set the action for these file types to "Local Analysis."

Apply the policy to the relevant access control policy.

This configuration ensures that the specified file types are analyzed locally, meeting the requirement to avoid sending them to Cisco Secure Malware Analytics.

[References:Cisco Secure Firewall Management Center Configuration Guide, Chapter on Malware and File Policies, , , ]

Questions # 125:

A security engineer needs to configure a network discovery policy on a Cisco FMC appliance and prevent excessive network discovery events from overloading the FMC database? Which action must be taken to accomplish this task?

Options:

Change the network discovery method to TCP/SYN.

Configure NetFlow exporters for monitored networks.

Monitor only the default IPv4 and IPv6 network ranges.

Exclude load balancers and NAT devices in the policy.

Answer

Questions # 126:

A network administrator is configuring a Cisco AMP public cloud instance and wants to capture infections and polymorphic variants of a threat to help detect families of malware. Which detection engine meets this requirement?

Options:

RBAC

Tetra

Ethos

Spero

Answer

Questions # 127:

A security engineer is deploying a pair of primary and secondary Cisco FMC devices. The secondary must also receive updates from Cisco Talos. Which action achieves this goal?

Options:

Force failover for the secondary Cisco FMC to synchronize the rule updates from the primary.

Configure the secondary Cisco FMC so that it receives updates from Cisco Talos.

Manually import rule updates onto the secondary Cisco FMC device.

Configure the primary Cisco FMC so that the rules are updated.

Answer

Questions # 128:

An analyst is reviewing the Cisco FMC reports for the week. They notice that some peer-to-peer applications are being used on the network and they must identify which poses the greatest risk to the environment. Which report gives the analyst this information?

Options:

Attacks Risk Report

User Risk Report

Network Risk Report

Advanced Malware Risk Report

Answer

Questions # 129:

An engineer has been tasked with using Cisco FMC to determine if files being sent through the network are malware. Which two configuration takes must be performed to achieve this file lookup? (Choose two.)

Options:

The Cisco FMC needs to include a SSL decryption policy.

The Cisco FMC needs to connect to the Cisco AMP for Endpoints service.

The Cisco FMC needs to connect to the Cisco ThreatGrid service directly for sandboxing.

The Cisco FMC needs to connect with the FireAMP Cloud.

The Cisco FMC needs to include a file inspection policy for malware lookup.

Answer

D, E

Questions # 130:

Which Cisco Firepower feature is used to reduce the number of events received in a period of time?

Options:

rate-limiting

suspending

correlation

thresholding

Answer

Explanation

[Reference: https://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa- firepower-module-user-guide-v541/Intrusion-Global-Threshold.html, , ]

Viewing page 13 out of 13 pages

Viewing questions 121-130 out of questions