Question 1

When do you need the file-size command option during troubleshooting with packet capture?

Options :

A : when capture packets are less than 16 MB

B : when capture packets are restricted from the secondary memory

C : when capture packets exceed 10 GB

D : when capture packets exceed 32 MB

Answer: D

Question 2

A network security engineer must export packet captures from the Cisco FMC web browser while troubleshooting an issue. When navigating to the address Error! Hyperlink reference not valid. IP>/capture/CAPI/pcap/test.pcap. an error 403: Forbidden is given instead of the PCAP file. Which action must the engineer take to resolve this issue?

Options :

A : Disable the HTTPS server and use HTTP instead.

B : Enable the HTTPS server for the device platform policy.

C : Disable the proxy setting on the browser.

D : Use the Cisco FTD IP address as the proxy server setting on the browser.

Answer: B

Question 3

An engineer is implementing a new Cisco Secure Firewall. The firewall must filler traffic between the three subnets: • LAN 192.168.101.0724 • DMZ 192.168 200.0/24 • WAN 10.0.0.0/30 Which firewall mode must the engineer implement?

Options :

A : transparent

B : network

C : routed

D : gateway

Answer: C

Question 4

Which Cisco Advanced Malware Protection for Endpoints policy is used only for monitoring endpoint actively?

Options :

A : Windows domain controller

B : audit

C : triage

D : protection

Answer: B

Question 5

A network administrator wants to block traffic to a known malware site at https://www.badsite.com and all subdomains while ensuring no packets from any internal client are sent to that site. Which type of policy must the network administrator use to accomplish this goal?

Options :

A : Prefilter policy

B : SSL policy

C : DNS policy

D : Access Control policy with URL filtering

Answer: D

Higher Test Marks with Free Online 300-710 Exam Practice

Buying Options: