Question 1

Which firewall design will allow It to forward traffic at layers 2 and 3 for the same subnet?

Options :

A : Cisco Firepower Threat Defense mode

B : routed mode

C : Integrated routing and bridging

D : transparent mode

Answer: D

Question 2

An engineer configures an access control rule that deploys file policy configurations to security zones or tunnel zones, and it causes the device to restart. What is the reason for the restart?

Options :

A : Source or destination security zones in the access control rule matches the security zones that are associated with interfaces on the target devices.

B : The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the destination policy.

C : Source or destination security zones in the source tunnel zone do not match the security zones that are associated with interfaces on the target devices.

D : The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the source policy.

Answer: A

Question 3

An administrator Is setting up a Cisco PMC and must provide expert mode access for a security engineer. The engineer Is permitted to use only a secured out-of-band network workstation with a static IP address to access the Cisco FMC. What must be configured to enable this access?

Options :

A : Enable SSH and define an access list.

B : Enable HTTP and define an access list.

C : Enable SCP under the Access List section.

D : Enable HTTPS and SNMP under the Access List section.

Answer: A

Question 4

After using Firepower for some time and learning about how it interacts with the network, an administrator is trying to correlate malicious activity with a user Which widget should be configured to provide this visibility on the Cisco Firepower dashboards?

Options :

A : Custom Analysis

B : Current Status

C : Current Sessions

D : Correlation Events

Answer: A

Question 5

What is the RTC workflow when the infected endpoint is identified?

Options :

A : Cisco ISE instructs Cisco AMP to contain the infected endpoint.

B : Cisco ISE instructs Cisco FMC to contain the infected endpoint.

C : Cisco AMP instructs Cisco FMC to contain the infected endpoint.

D : Cisco FMC instructs Cisco ISE to contain the infected endpoint.

Answer: D

Higher Test Marks with Free Online 300-710 Exam Practice

Buying Options: