Question 1

An administrator is attempting to add a Cisco Secure Firewall Threat Defence device to Cisco Secure FirewallManagement Center with a password of Cisco0480846211 480846211. The private IP address of the FMC server is 192.168.75.201. Which command must be used in order to accomplish this task?

Options :

A : configure manager add 192.168.75.201/24

B : configure manager add 192.16875.201

C : configure manager add 192.168.45.45

D : configure manager add 192.168.75.201 255.255.255.0

Answer: B

Question 2

An engineer is implementing a new Cisco Secure Firewall. The firewall must filler traffic between the three subnets: • LAN 192.168.101.0724 • DMZ 192.168 200.0/24 • WAN 10.0.0.0/30 Which firewall mode must the engineer implement?

Options :

A : transparent

B : network

C : routed

D : gateway

Answer: C

Question 3

An engineer wants to change an existing transparent Cisco FTD to routed mode.

The device controls traffic between two network segments. Which action is mandatory to allow hosts to reestablish communication between these two segments after the change?

Options :

A : remove the existing dynamic routing protocol settings.

B : configure multiple BVIs to route between segments.

C : assign unique VLAN IDs to each firewall interface.

D : implement non-overlapping IP subnets on each segment.

Answer: D

Question 4

A network engineer must provide redundancy between two Cisco FTD devices. The redundancy configuration must include automatic configuration, translation, and connection updates. After the initial configuration of the two appliances, which two steps must be taken to proceed with the redundancy configuration? (Choose two.)

Options :

A : Configure the virtual MAC address on the failover link.

B : Disable hellos on the inside interface.

C : Configure the standby IP addresses.

D : Ensure the high availability license is enabled.

E : Configure the failover link with stateful properties.

Answer: A,C

Question 5

An administrator is configuring the interface of a Cisco Secure Firewall Threat Defense device in a passive IPS deployment. The device and interface have been identified. Which set of configuration steps of the administrator take next to complete the implementation?

Options :

A : Set the interface mode to passive. Associate the interface with a security zone. Enable the interface. Set the MTU parameter.

B : Modify the interface to retransmit received traffic. Associate the interface with a security zone Set the MTU parameter

C : Set the interface mode to passive. Associate the interface with a security zone. Set the MTU parameter. Reset the interface.

D : Modify the interface to retransmit received traffic. Associate the interface with a security zone. Enable the interface. Set the MTU parameter.

Answer: C

Higher Test Marks with Free Online 300-710 Exam Practice

Buying Options: