Securing Networks with Cisco Firepower (SNCF)338 questions across 34 pages are complete and free, with no account or card.
338 questions in this bank
Free access · progress saved on this device
An engineer must configure a correlation policy in Cisco Secure Firewall Management Center to detect when an IP address from an internal network communicates with a known malicious host. Connections made by the internal IP addresses must be tracked, and an external dynamic list must be used for the condition. Which type of event must the engineer configure on the correlation policy?
Answer: B
An engineer is configuring two new Cisco Secure Firewall Threat Defense devices to replace the existing firewalls. Network traffic must be analyzed for intrusion events without impacting the traffic. What must the engineer implement next to accomplish the goal?
Answer: C
A network engineer must configure an existing firewall to have a NAT configuration. The new configuration must support more than two interfaces per context. The firewall has previously been operating in transparent mode. The Cisco Secure Firewall Threat Defense device has been deregistered from Cisco Secure Firewall Management Center. Which set of configuration actions must the network engineer take next to meet the requirements?
Answer: A
Refer to the exhibit. An engineer is configuring an instance of Cisco Secure Firewall Threat Defense with a Secure Firewall Threat Defense interface in IPS Inline Pair mode. What must the engineer configure on interface e1/6?
Answer: B
Refer to the exhibit. A client that has IP address 192.168.67.102 reports issues when connecting to a remote server. Based on the topology and output of packet tracer tool, which action resolves the connectivity issue?
Answer: B
How is IRB on next-generation firewall running in transparent mode supported?
Answer: C
What is a method used by Cisco Rapid Threat Containment to contain the threat in the network?
Answer: B
Refer to the exhibit. An engineer is analyzing a Network Risk Report generated in Cisco Secure Firewall Management Center. Against which application must immediate action be taken to prevent unauthorized and uninspected network use?
Answer: D
An engineer must configure email notifications on Cisco Secure Firewall Management Center. TLS encryption must be used to protect the messages from unauthorized access. The engineer adds the IP address of the mail relay host and must set the port number. Which TCP port must the engineer use?
Answer: D
Refer to the exhibit.
An engineer must import three network objects into the Cisco Secure Firewall Management Center by using a CSV file. Which header must be configured in the CSV file to accomplish the task?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-710 practice, question 311. 338 questions available.
Version 1.0.0. How we source questions