Securing Networks with Cisco Firepower (SNCF)338 questions across 34 pages are complete and free, with no account or card.
338 questions in this bank
Free access · progress saved on this device
An administrator is configuring a new report template off of a saved search within Cisco Secure Firewall Management Center. The goal is to use the malware analysis report template, but use a different type of saved search as the basis. The report is not working. What must be considered when configuring this report template?
Answer: D
An engineer is tasked with deploying an internal perimeter firewall that will support multiple DMZs. Each DMZ has a unique private IP subnet range. How is this requirement satisfied?
Answer: B
To support multiple DMZs with unique private IP subnet ranges, the engineer should deploy the firewall in routed mode with access control policies. Therefore, the correct answer is option B. By deploying the firewall in routed mode with access control policies, the engineer can configure the firewall to route traffic between the DMZs and the internal network based on their unique private IP subnet ranges. The access control policies can be used to enforce security policies to control which traffic is allowed between the DMZs and the internal network. This provides a secure and efficient way to manage traffic between the DMZs and the internal network.
Source: Adapted from community discussion — Joe_Blue
An engineer must implement Cisco Secure Firewall transparent mode due to a new server recently being added that must communicate with an existing server that is currently separated by the firewall. Which implementation action must be taken next by the engineer to accomplish the goal?
Answer: D
Refer to the exhibit. An engineer is configuring a high-availability solution that has the hardware devices and software versions: • two Cisco Secure Firewall 9300 Security Appliances with FXOS SW 2.0(1.23) • one Cisco Secure Firewall Threat Defense with 6.0 1 1 (build 1023) • one Cisco Secure Firewall Management Center with SW 6 0.1.1 (build 1023) Which condition must be met to complete the high-availability configuration?
Answer: D
For the Firepower 9300: Have the same number and types of interfaces. all interfaces must be preconfigured in FXOS identically before you enable High Availability. If you change the interfaces after you enable High Availability, make the interface changes in FXOS on the Standby unit, and then make the same changes on the Active unit. https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/high_availability_for_firepower_threat_defense.html
Source: Adapted from community discussion — artilling
An engineer is deploying a Cisco Secure Firewall Management Center appliance. The company must send data to Cisco Secure Network Analytics appliances. Which two actions must the engineer take? (Choose two.)
Answer: CD
A network administrator is trying to configure a previously created file policy on a new access policy. Which action must the administrator take before applying the file policy?
Answer: C
A security engineer must add a new policy to block UDP traffic to one server. The engineer adds a new object. Which action must the engineer take next to identify all the UDP ports?
Answer: B
According to the link below, there is no "blank object" and in order to cover all ports, you have to put in the range 1-65535 This is why I am using B https://www.cisco.com/c/en/us/td/docs/security/firepower/710/fdm/fptd-fdm-config-guide-710/fptd-fdm-objects.html#task_49CC5243743F4921AAF00CF6AB0264BE
Source: Adapted from community discussion — Silexis
Refer to the exhibit. An engineer is configuring access control rules on a Cisco Secure Firewall Threat Defense device. The access control rules must include a file policy with rules that will trigger when MSEXE files are accessed. Which two actions must be configured in the access rule? (Choose two.)
Answer: BD
Definitely not AC. The answer is BD. I have verified in my lab that if you set the ACP action to A/C/E, the File Policy (and Intrusion Policy) is automatically set to "None" and cannot be changed. File Policy can only be set when ACP actions are B and D.
Source: Adapted from community discussion — tinyJoe
Refer to the exhibit. An engineer is deploying a new instance of Cisco Secure Firewall Threat Defense. Which action must the engineer take next so that Client_A and Client_B receive an IP address via DHCP from Server_A?
Answer: D
Correct Answer: D For features that are not directly supported on the transparent firewall, you can allow traffic to pass through so that upstream and downstream routers can support the functionality. For example, by using an access rule, you can allow DHCP traffic (instead of the unsupported DHCP relay feature) or multicast traffic such as that created by IP/TV. https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/transparent_or_routed_firewall_mode_for_firepower_threat_defense.html
Source: Adapted from community discussion — artilling
A VPN administrator converted an instance of Cisco Secure Firewall Threat Defense, which is managed by Cisco Secure Firewall Management Center, from using LDAP to LDAPS for remote access VPN authentication. Which certificate must be added to allow for remote users to authenticate over the VPN?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-710 practice, question 221. 338 questions available.
Version 1.0.0. How we source questions