300-710 practice questions 281–290

1. Question 281 · 338 in bank

   Select 2

   Which two deployment types support high availability? (Choose two.)

   • Atransparent
   • Brouted
   • Cclustered
   • Dintra-chassis multi-instance
   • Evirtual appliance in public cloud

   Show answer

   Answer: AB

   Explanation

   Conditions In order to create an HA between 2 FTD devices, these conditions must be met: Same model Same version- this applies to FXOS and to FTD - major (first number), minor (second number), and maintenance (third number) must be equal. Same number of interfaces Same type of interfaces Both devices as part of the same group/domain in FMC. Have identical Network Time Protocol (NTP) configuration. Be fully deployed on the FMC without uncommitted changes. Be in the same firewall mode: routed or transparent.

   Source: Adapted from community discussion — m70855712

   References

   • Cisco documentation

   Next question

2. Question 282 · 338 in bank

   An organization is using a Cisco FTD and Cisco ISE to perform identity-based access controls. A network administrator is analyzing the Cisco FTD events and notices that unknown user traffic is being allowed through the firewall. How should this be addressed to block the traffic while allowing legitimate user traffic?

   • AModify the Cisco ISE authorization policy to deny this access to the user
   • BModify Cisco ISE to send only legitimate usernames to the Cisco FTD
   • CAdd the unknown user in the Access Control Policy in Cisco FTD
   • DAdd the unknown user in the Malware & File Policy in Cisco FTD

   Show answer

   Answer: A

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/fdm/fptd-fdm-config-guide-640/fptd-fdm- identity.html#concept_655B055575E04CA49B10186DEBDA301A

   Source: Adapted from community discussion — gwb

   Next question

3. Question 283 · 338 in bank

   What is the benefit of selecting the trace option for packet capture?

   • AThe option indicates whether the packet was dropped or successful.
   • BThe option indicates whether the destination host responds through a different path.
   • CThe option limits the number of packets that are captured.
   • DThe option captures details of each packet.

   Show answer

   Answer: A

   Explanation

   Correct answer is A. Because - Packet capture is available with the trace option, which provides you with a verdict as to whether the packet is dropped or successful. https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/troubleshooting_the_system.html#:~:text=Packet%20capture%20is%20available%20with%20the%20trace%20option%2C%20which%20provides%20you%20with%20a%20verdict%20as%20to%20whether%20the%20packet%20is%20dropped%20or%20successful.

   Source: Adapted from community discussion — Heorhiiyatskovskyi

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

4. Question 284 · 338 in bank

   After deploying a network-monitoring tool to manage and monitor networking devices in your organization, you realize that you need to manually upload an MIB for the Cisco FMC. In which folder should you upload the MIB file?

   • A/etc/sf/DCMIB.ALERT
   • B/sf/etc/DCEALERT.MIB
   • C/etc/sf/DCEALERT.MIB
   • Dsystem/etc/DCEALERT.MIB

   Show answer

   Answer: C

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa-firepower-module-user-guide-v541/Intrusion-External- Responses.pdf

   References

   • Cisco documentation

   Next question

5. Question 285 · 338 in bank

   Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?

   • Aconfigure coredump packet-engine enable
   • Bcapture-traffic
   • Ccapture
   • Dcapture WORD

   Show answer

   Answer: D

   Explanation

   Answer: C Reason: the command "capture-traffic" is used for SNORT Engine Captures. To capture a LINA Engine Capture, you use the "capture" command. Since the Lina Engine represents the actual physical interface of the device, "capture" is the only reasonable choice Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212474-working-with-firepower-threat-defense-f.html#anc10

   Source: Adapted from community discussion — James3222

   References

   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation
   • cisco.com documentation

   Next question

6. Question 286 · 338 in bank

   Which report template field format is available in Cisco FMC?

   • Abox lever chart
   • Barrow chart
   • Cbar chart
   • Dbenchmark chart

   Show answer

   Answer: C

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Working_with_Reports.html

   Next question

7. Question 287 · 338 in bank

   Which protocol establishes network redundancy in a switched Firepower device deployment?

   • ASTP
   • BHSRP
   • CGLBP
   • DVRRP

   Show answer

   Answer: A

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/ firepower_threat_defense_high_availability.html

   References

   • Cisco documentation

   Next question

8. Question 288 · 338 in bank

   DRAG DROP - Drag and drop the steps to restore an automatic device registration failure on the standby Cisco FMC from the left into the correct order on the right. Not all options are used. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/ firepower_management_center_high_availability.html#id_32288

   

   Next question

9. Question 289 · 338 in bank

   Which CLI command is used to generate firewall debug messages on a Cisco Firepower?

   • Asystem support firewall-engine-debug
   • Bsystem support ssl-debug
   • Csystem support platform
   • Dsystem support dump-table

   Show answer

   Answer: A

   Explanation

   Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212330-firepower-management-center-display-acc.html

   References

   • Cisco documentation

   Next question

10. Question 290 · 338 in bank

    Which command-line mode is supported from the Cisco FMC CLI?

    • Aprivileged
    • Buser
    • Cconfiguration
    • Dadmin

    Show answer

    Answer: C

    Explanation

    Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/660/configuration/guide/fpmc-config-guide-v66/command_line_reference.pdf

    Source: Adapted from community discussion — netwguy

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-710 practice, question 281. 338 questions available.