Securing Networks with Cisco Firepower (SNCF)338 questions across 34 pages are complete and free, with no account or card.
338 questions in this bank
Free access · progress saved on this device
An engineer must deploy a Cisco FTD appliance via Cisco FMC to span a network segment to detect malware and threats. When setting the Cisco FTD interface mode, which sequence of actions meets this requirement?
Answer: C
An engineer wants to perform a packet capture on the Cisco FTD to confirm that the host using IP address 192.168.100.100 has the MAC address of 1234.5678.901 to help troubleshoot a connectivity issue. What is the correct tcpdump command syntax to ensure that the MAC address appears in the packet capture output?
Answer: D
Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)
Answer: AE
Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/212699-configure-ftd-high-availability-on-firep.html
An engineer is setting up a new Firepower deployment and is looking at the default FMC policies to start the implementation. During the initial trial phase, the organization wants to test some common Snort rules while still allowing the majority of network traffic to pass. Which default policy should be used?
Answer: D
This should be a "No-Brainer" but I am really surprised so many think A is the answer. The answer is 100% Text Book - D. connectivity over security. It's the text book use case.
Source: Adapted from community discussion — wordisbondkid
What must be implemented on Cisco Firepower to allow multiple logical devices on a single physical device to have access to external hosts?
Answer: D
Mgmt—Use to manage application instances. These interfaces can be shared by one or more logical devices to access external hosts; logical devices cannot communicate over this interface with other logical devices that share the interface. You can only assign one management interface per logical device. Depending on your application and manager, you can later enable management from a data interface; but you must assign a Management interface to the logical device even if you don't intend to use it after you enable data management. https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/firepower_threat_defense_logical_devices.html#id_77524
Source: Adapted from community discussion — Cokamaniako
An engineer must configure a Cisco FMC dashboard in a multidomain deployment. Which action must the engineer take to edit a report template from an ancestor domain?
Answer: A
A. Copy it to the current domain. To edit a report template from an ancestor domain in a multidomain deployment in Cisco FMC, the engineer must copy the report template to the current domain. By default, report templates are available only in the domain in which they were created. If the engineer needs to edit a report template from an ancestor domain, they can make a copy of the report template and then edit the copy in the current domain. The other options listed are not the correct action to take to edit a report template from an ancestor domain. A is not applicable as it refers to adding a separate widget, which does not address the issue of editing a report template. C is not applicable as ownership of the report template is not relevant to editing it. D is not applicable as changing document attributes does not address the issue of editing a report template from an ancestor domain.
Source: Adapted from community discussion — tanri04
A company is deploying intrusion protection on multiple Cisco FTD appliances managed by Cisco FMC. Which system-provided policy must be selected if speed and detection are priorities?
Answer: D
Agreed with D: Balanced Security and Connectivity network analysis and intrusion policies These policies are built for both speed and detection. Used together, they serve as a good starting point for most organizations and deployment types. The system uses the Balanced Security and Connectivity policies and settings as defaults in most cases. https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/overview_of_network_analysis_and_intrusion_policies.html
Source: Adapted from community discussion — Mevijil
An engineer integrates Cisco FMC and Cisco ISE using pxGrid. Which role is assigned for Cisco FMC?
Answer: D
I will go "D" Validation on ISE. When the FMC pxGrid client has been successfully integrated on ISE, you then see )in the menu Administration > pxGrid Services > Client Management > Clients) clients with the name fmc are included and enabled. https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-32/220856-configure-and-troubleshoot-ise-3-2-with.html
Source: Adapted from community discussion — gwb
A company wants a solution to aggregate the capacity of two Cisco FTD devices to make the best use of resources such as bandwidth and connections per second. Which order of steps must be taken across the Cisco FTDs with Cisco FMC to meet this requirement?
Answer: D
In Chassis manager, you (STEP1) config the interfaces, create the cluster and add nodes, then you (STEP2) switch to FMC to add the units to FMC and build the cluster there. https://www.cisco.com/c/en/us/td/docs/security/firepower/fxos/clustering/ftd-4100-9300-cluster.html#task_tqm_ghj_qgb
Source: Adapted from community discussion — Gabranch
The administrator notices that there is malware present with an .exe extension and needs to verify if any of the systems on the network are running the executable file. What must be configured within Cisco AMP for Endpoints to show this data?
Answer: D
"Prevalence: AMP displays all files that are running across your organization, ordered by prevalence, to help you surface previously undetected threats seen by a small number of users. Files opened by only a few users may be malicious." Took it from https://cstor.com/wp-content/uploads/2016/10/Cisco_Advanced-Malware-Protection-for-Endpoints_Data-Sheet.pdf
Source: Adapted from community discussion — [Removed]
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-710 practice, question 91. 338 questions available.
Version 1.0.0. How we source questions