Securing Networks with Cisco Firepower (SNCF)338 questions across 34 pages are complete and free, with no account or card.
338 questions in this bank
Free access · progress saved on this device
Which two dynamic routing protocols are supported in Cisco FTD without using FlexConfig? (Choose two.)
Answer: BE
When the question says which two "DYNAMIC" routing protocols, I can't understand how the person running this place could choose static...
Source: Adapted from community discussion — jewell2j
Refer to the exhibit. What must be done to fix access to this website while preventing the same communication to all other websites?
Answer: D
A connectivity issue is occurring between a client and a server which are communicating through a Cisco Firepower device. While troubleshooting, a network administrator sees that traffic is reaching the server, but the client is not getting a response. Which step must be taken to resolve this issue without initiating traffic from the client?
Answer: D
if the traffic was being blocked by an access list, then the traffic would not be reaching the server, so it discards A answer. correct Answer is D
Source: Adapted from community discussion — wernervv32
A VPN user is unable to connect to web resources behind the Cisco FTD device terminating the connection. While troubleshooting, the network administrator determines that the DNS response are not getting through the Cisco FTD. What must be done to address this issue while still utilizing Snort IPS rules?
Answer: B
To address the issue of DNS responses not getting through the Cisco FTD while still utilizing Snort IPS rules, the network administrator should modify the Snort rules to allow legitimate DNS traffic to the VPN users. Snort is an intrusion detection and prevention system that can be used to detect and prevent malicious traffic. However, in some cases, Snort rules may block legitimate traffic, such as DNS responses, causing connectivity issues for VPN users.
Source: Adapted from community discussion — Joe_Blue
An organization has a Cisco IPS running in inline mode and is inspecting traffic for malicious activity. When traffic is received by the Cisco IPS, if it is not dropped, how does the traffic get to its destination?
Answer: A
The Answer is absolutely A. "Inline interfaces receive all traffic unconditionally, but all traffic received on these interfaces is retransmitted out of an inline set unless explicitly dropped." You can verify my answer here: https://www.cisco.com/c/en/us/td/docs/security/firepower/601/configuration/guide/fpmc-config-guide-v601/fpmc-config-guide-v60_chapter_01011010.pdf The third page, under (Inline IPS Deployments)
Source: Adapted from community discussion — eazy99
An engineer is investigating connectivity problems on Cisco Firepower that is using service group tags. Specific devices are not being tagged correctly, which is preventing clients from using the proper policies when going through the firewall. How is this issue resolved?
Answer: C
Yes, using a packet capture with match criteria would be a good way to troubleshoot this issue. The packet capture can be set up to capture traffic only from the specific devices that are not being tagged correctly. The match criteria can be set to filter for traffic that is associated with the service group in question, allowing the engineer to see if the traffic is being tagged correctly or not. Based on the results of the packet capture, the engineer can then take appropriate actions to resolve the issue.
Source: Adapted from community discussion — Joe_Blue
An organization must be able to ingest NetFlow traffic from their Cisco FTD device to Cisco Stealthwatch for behavioral analysis. What must be configured on the Cisco FTD to meet this requirement?
Answer: A
correct: Step 4. Configure the Netflow Destination In order to configure the Netflow Destination, navigate to Objects > FlexConfig > FlexConfig Objects https://www.cisco.com/c/en/us/support/docs/quality-of-service-qos/netflow/216126-configure-netflow-secure-event-logging-o.html#anc14
Source: Adapted from community discussion — Doris8000
An engineer must build redundancy into the network and traffic must continuously flow if a redundant switch in front of the firewall goes down. What must be configured to accomplish this task?
Answer: D
The answer is correct: Virtual Port Channels (vPC) are common EtherChannel deployments, especially in the data center, and allow multiple devices to share multiple interfaces EtherChannel Interface requires stack, VSS or vPC when connected to multiple switches
Source: Adapted from community discussion — Doris8000
A network administrator notices that inspection has been interrupted on all non-managed interfaces of a device. What is the cause of this?
Answer: A
The answer is correct Caution : Changing the highest MTU value among all non-management interfaces on the device restarts the Snort process when you deploy configuration changes, temporarily interrupting traffic inspection. Inspection is interrupted on all non-management interfaces, not just the interface you modified. Whether this interruption drops traffic or passes it without further inspection depends on the model of the managed device and the interface type. See Snort® Restart Traffic Behavior for more information. https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/fpmc-config-guide-v60_chapter_01101010.html
Source: Adapted from community discussion — Doris8000
A network administrator needs to create a policy on Cisco Firepower to fast-path traffic to avoid Layer 7 inspection. The rate at which traffic is inspected must be optimized. What must be done to achieve this goal?
Answer: B
B. Configure a prefilter policy. A prefilter policy allows you to bypass certain rules for certain types of traffic, thus fast-pathing the traffic to avoid Layer 7 inspection. By configuring a prefilter policy, you can optimize the rate at which traffic is inspected by selectively bypassing rules that are not needed for certain types of traffic.
Source: Adapted from community discussion — tanri04
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-710 practice, question 11. 338 questions available.
Version 1.0.0. How we source questions