300-710 practice questions 161–170

1. Question 161 · 338 in bank

   Select 2

   An engineer is configuring URL filtering for a Cisco FTD device in Cisco FMC. Users must receive a warning when they access http://www.badadultsite.com with the option of continuing to the website if they choose to. No other websites should be blocked. Which two actions must the engineer take to meet these requirements? (Choose two.)

   • AOn the HTTP Responses tab of the access control policy editor, set the Interactive Block Response Page to System-provided.
   • BConfigure the default action for the access control policy to Interactive Block.
   • CConfigure an access control rule that matches an URL object for http://www.badadultsite.com/ and set the action to Interactive Block.
   • DConfigure an access control rule that matches the Adult URL category and set the action to Interactive Block.
   • EOn the HTTP Responses tab of the access control policy editor, set the Block Response Page to Custom.

   Show answer

   Answer: AC

   Explanation

   A: Choose the Block Response Page and Interactive Block Response Page: System-provided—Displays a generic response. Click View (view button) to view the code for this page. https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/http_response_pages_and_interactive_blocking.html#:~:text=Response%20Page%3A-,System%2Dprovided,-%E2%80%94Displays%20a%20generic C: Allow users to bypass a website block by clicking through a warning page. -->HTTP Response Pages and Interactive Blocking https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config-guide-v63/url_filtering.html#:~:text=Allow%20users%20to%20bypass%20a%20website%20block%20by%20clicking%20through%20a%20warning%20page

   Source: Adapted from community discussion — Doris8000

   References

   • Cisco documentation
   • Cisco documentation

   Next question

2. Question 162 · 338 in bank

   The security engineer reviews the syslog server events of an organization and sees many outbound connections to malicious sites initiated from hosts running Cisco Secure Endpoint. The hosts are on a separate network from the Cisco FTD device. Which action blocks the connections?

   • AModify the policy on Cisco Secure Endpoint to enable DFC.
   • BModify the access control policy on the Cisco FMC to block malicious outbound connections
   • CAdd the IP addresses of the malicious sites to the access control policy on the Cisco FMC
   • DAdd a Cisco Secure Endpoint policy with the Tetra and Spero engines enabled

   Show answer

   Answer: A

   Explanation

   It should be A: Enable Device Flow Correlation allows you to monitor network activity and determine which action the connector should take when connections to malicious hosts are detected. The question says "the host is on separete network from FTD device so Access Control Rule will hava no effect on the host

   Source: Adapted from community discussion — LC1980

   References

   • cisco.com documentation

   Next question

3. Question 163 · 338 in bank

   An engineer has been tasked with performing an audit of network objects to determine which objects are duplicated across the various firewall models (Cisco Secure Firewall Threat Defense, Cisco Secure Firewall ASA, and Meraki MX Series) deployed throughout the company. Which tool will assist the engineer in performing that audit?

   • ACisco Firepower Device Manager
   • BCisco Defense Orchestrator
   • CCisco Secure Firewall Management Center
   • DCisco SecureX

   Show answer

   Answer: B

   Explanation

   Cisco Defense Orchestrator is a cloud-based management solution that allows you to manage security policies and device configurations with ease across multiple Cisco and cloud-native security platforms. Cisco Defense Orchestrator centrally manages elements of policy and configuration across: ● Cisco Secure Firewall ASA, both on-premises and virtual ● Cisco Secure Firewall Threat Defense (FTD), both on-premises and virtual ● Cisco Meraki™ MX ● Cisco IOS devices ● AWS security groups https://www.cisco.com/c/en/us/products/collateral/security/defense-orchestrator/datasheet-c78-736847.html#:~:text=Cisco%20Defense%20Orchestrator%20is%20a,and%20cloud%2Dnative%20security%20platforms.

   Source: Adapted from community discussion — Bubu3k

   References

   • Cisco documentation

   Next question

4. Question 164 · 338 in bank

   Select 2

   A network engineer is deploying a pair of Cisco Secure Firewall Threat Defense devices managed by Cisco Secure Firewall Management Center for High Availability. Internet access is a high priority for the business and therefore they have invested in internet circuits from two different ISPs. The requirement from the customer is that internet access must be available to their users even if one of the ISPs is down. Which two features must be deployed to achieve this requirement? (Choose two.)

   • ARoute Tracking
   • BRedundant interfaces
   • CEtherChannel interfaces
   • DSLA Monitor
   • EBGP

   Show answer

   Answer: AD

   References

   • Cisco documentation

   Next question

5. Question 165 · 338 in bank

   Select 2

   A network engineer is planning on replacing an Active/Standby pair of physical Cisco Secure Firewall ASAs with a pair of Cisco Secure Firewall Threat Defense Virtual appliances. Which two virtual environments support the current High Availability configuration? (Choose two.)

   • AESXi
   • BAzure
   • COpenstack
   • DKVM
   • EAWS

   Show answer

   Answer: AD

   References

   • Cisco documentation

   Next question

6. Question 166 · 338 in bank

   A company is deploying AMP private cloud. The AMP private cloud instance has already been deployed by the server administrator. The server administrator provided the hostname of the private cloud instance to the network engineer via email. What additional information does the network engineer require from the server administrator to be able to make the connection to the AMP private cloud in Cisco FMC?

   • ASSL certificate for the AMP private cloud instance
   • BUsername and password to the AMP private cloud instance
   • CIP address and port number for the connection proxy
   • DInternet access for the AMP private cloud to reach the AMP public cloud

   Show answer

   Answer: A

   Explanation

   Step 6: Click Browse next to the Certificate Upload Path field to browse to the location of a valid TLS or SSL encryption certificate for the private cloud. For more information, see the AMP private cloud documentation. https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/file_policies_and_amp_for_firepower.html

   Source: Adapted from community discussion — Bubu3k

   References

   • Cisco documentation

   Next question

7. Question 167 · 338 in bank

   A security engineer is deploying Cisco Secure Endpoint to detect a zero day malware attack with an SHA-256 hash of 47ea931f3e9dc23ec0b0885a80663e30ea013d493f8e88224b570a0464084628. What must be configured in Cisco Secure Endpoint to enable the application to take action based on this hash?

   • Aaccess control rule
   • Bcorrelation policy
   • Ctransform set
   • Dcustom detection list

   Show answer

   Answer: D

   References

   • Cisco documentation

   Next question

8. Question 168 · 338 in bank

   What is a characteristic of bridge groups on a Cisco FTD?

   • AIn routed firewall mode, routing between bridge groups is supported.
   • BRouting between bridge groups is achieved only with a router-on-a-stick configuration on a connected router.
   • CIn routed firewall mode, routing between bridge groups must pass through a routed interface.
   • DIn transparent firewall mode, routing between bridge groups is supported.

   Show answer

   Answer: A

   Explanation

   In routed mode: The BVI acts as the gateway between the bridge group and other routed interfaces. To route between bridge groups/routed interfaces, you must name the BVI. For some interface-based features, you can use the BVI itself. https://www.cisco.com/c/en/us/td/docs/security/asa/asa97/configuration/general/asa-97-general-config/intro-fw.pdf

   Source: Adapted from community discussion — liqucika

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

9. Question 169 · 338 in bank

   A security engineer must create a malware and file policy on a Cisco Secure Firewall Threat Defense device. The solution must ensure that PDF, DOCX, and XLSX files are not sent to Cisco Secure Malware Analytics. What must be configured to meet the requirements?

   • ASpero analysis
   • Blocal malware analysis
   • Ccapacity handling
   • Ddynamic analysis

   Show answer

   Answer: B

   Next question

10. Question 170 · 338 in bank

    Encrypted Visibility Engine (EVE) is enabled under which tab on an access control policy in Cisco Secure Firewall Management Center?

    • ANetwork Analysis Policy
    • BSSL
    • CAdvanced
    • DSecurity Intelligence

    Show answer

    Answer: C

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-710 practice, question 161. 338 questions available.