Securing Networks with Cisco Firepower (SNCF)338 questions across 34 pages are complete and free, with no account or card.
338 questions in this bank
Free access · progress saved on this device
Which command is entered in the Cisco FMC CLI to generate a troubleshooting file?
Answer: D
Reference: https://www.cisco.com/c/en/us/support/docs/security/sourcefire-defense-center/117663-technote-SourceFire-00.html
Which CLI command is used to control special handling of ClientHello messages?
Answer: A
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/firepower_command_line_reference.html
Source: Adapted from community discussion — THEODORABLE
Which command is typed at the CLI on the primary Cisco FTD unit to temporarily stop running high-availability?
Answer: D
Correct answer should be "D" (Suspend). If you choose disable, you will PERMANENTLY break the high availability connection. The keyword here is "TEMPORARILY"
Source: Adapted from community discussion — ASherbiny_1604
Which command must be run to generate troubleshooting files on an FTD?
Answer: C
C is the correct answer 100%. Firepower Management Center Enter this command on the Firepower Management Center in order to generate a troubleshoot file: admin@FMC:~$ sudo sf_troubleshoot.pl Starting /usr/local/sf/bin/sf_troubleshoot.pl... Please, be patient. This may take several minutes. Troubleshoot information successfully created at /var/common/xxxxxx.tar.gz Firepower Devices Enter this command on FirePOWER devices/modules and virtual managed devices in order to generate a troubleshoot file: > system generate-troubleshoot all Starting /usr/local/sf/bin/sf_troubleshoot.pl... Please, be patient. This may take several minutes. The troubleshoot option code specified is ALL. Troubleshoot information successfully created at /var/common/xxxxxx.tar.gz https://www.cisco.com/c/en/us/support/docs/security/sourcefire-defense-center/117663-technote-SourceFire-00.html
Source: Adapted from community discussion — matan24
When is the file-size command needed while troubleshooting with packet capture?
Answer: D
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/troubleshooting_the_system.html
What is a functionality of port objects in Cisco FMC?
Answer: B
According to the documentation, the answer is correct. Ans.B "A port object can represent other protocols that do not use ports." And the other options are casually mentioned in the documentation as being wrong. A and D: # When using port objects, observe the following guidelines: -"You cannot add any protocol other than TCP or UDP for source port conditions in access control rules. Also, you cannot mix transport protocols when setting both source and destination port conditions in a rule." -"If you create a port object containing both TCP and UDP ports, then add it as a source port condition in a rule, you cannot add a destination port, and vice versa." # and answer C: #Port objects represent different protocols in slightly different ways: *and start with the introduction* https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config-guide-v63/reusable_objects.html#ID-2243-00000364
Source: Adapted from community discussion — NoOn3x
Which interface type allows packets to be dropped?
Answer: B
A network engineer is configuring URL Filtering on Cisco FTD. Which two port requirements on the FMC must be validated to allow communication with the cloud service? (Choose two.)
Answer: AE
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/ Security__Internet_Access__and_Communication_Ports.html
What is the maximum bit size that Cisco FMC supports for HTTPS certificates?
Answer: C
Since version 6.2 (incl) all FMC versions supports 4096 HTTPS Certificates. This is important to know cos u will not be able to enter Web GUI at all.
Source: Adapted from community discussion — kakakayayaya
Which two considerations must be made when deleting and re-adding devices while managing them via Cisco FMC? (Choose two.)
Answer: DE
It's D & E for sure. "When a device is deleted and then re-added, the FMC web interface prompts you to re-apply your access control policies. However, there is no option to re-apply the NAT and VPN policies during registration. Any previously applied NAT or VPN configuration will be removed during registration and must be re-applied after registration is complete." https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Device_Management_Basics.html#ID-2242-00000786 When a device is deleted from FMC, the manager is not automatically removed.
Source: Adapted from community discussion — Stevens0103
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-710 practice, question 291. 338 questions available.
Version 1.0.0. How we source questions