Guaranteed High Marks with Updated & Real 300-710 Dumps pdf Free Updates [Q191-Q215]

NEW QUESTION 191
An engineer is troubleshooting a device that cannot connect to a web server. The connection is initiated from the Cisco FTD inside interface and attempting to reach 10.0.1.100 over the non-standard port of 9443 The host the engineer is attempting the connection from is at the IP address of 10.20.10.20. In order to determine what is happening to the packets on the network, the engineer decides to use the FTD packet capture tool Which capture configuration should be used to gather the information needed to troubleshoot this issue?

NEW QUESTION 192
A company is in the process of deploying intrusion protection with Cisco FTDs managed by a Cisco FMC. Which action must be selected to enable fewer rules detect only critical conditions and avoid false positives?

Connectivity Over Security

Balanced Security and Connectivity

Maximum Detection

No Rules Active

NEW QUESTION 193
An organization must be able to ingest NetFlow traffic from their Cisco FTD device to Cisco Stealthwatch for behavioral analysis.
What must be configured on the Cisco FTD to meet this requirement?

flexconfig object for NetFlow

interface object to export NetFlow

security intelligence object for NetFlow

variable set object for NetFlow

NEW QUESTION 194
In a multi-tenant deployment where multiple domains are in use. which update should be applied outside of the Global Domain?

minor upgrade

local import of intrusion rules

Cisco Geolocation Database

local import of major upgrade

NEW QUESTION 195
An engineer is configuring a custom intrusion rule on Cisco FMC. The engineer needs the rule to search the payload or stream for the string “|45 5* 26 27 4 0A|*. Which Keyword must the engineer use with this stung lo create an argument for packed inspection?

metadata

Content

Protected _ content

data

NEW QUESTION 196
A network engineer is extending a user segment through an FTD device for traffic inspection without creating another IP subnet.
How is this accomplished on an FTD device in routed mode?

by leveraging the ARP to direct traffic through the firewall

by assigning an inline set interface

by using a BVI and create a BVI IP address in the same subnet as the user segment

by bypassing protocol inspection by leveraging pre-filter rules

NEW QUESTION 197
An organization has a compliancy requirement to protect servers from clients, however, the clients and servers all reside on the same Layer 3 network Without readdressing IP subnets for clients or servers, how is segmentation achieved?

Deploy a firewall in transparent mode between the clients and servers.

Change the IP addresses of the clients, while remaining on the same subnet.

Deploy a firewall in routed mode between the clients and servers

Change the IP addresses of the servers, while remaining on the same subnet

NEW QUESTION 198
Refer to the exhibit.

What is the effect of the existing Cisco FMC configuration?

The remote management port for communication between the Cisco FMC and the managed device changes to port 8443.

The managed device is deleted from the Cisco FMC.

The SSL-encrypted communication channel between the Cisco FMC and the managed device becomes plain-text communication channel.

The management connection between the Cisco FMC and the Cisco FTD is disabled.

NEW QUESTION 199
A network administrator configured a NAT policy that translates a public IP address to an internal web server IP address. An access policy has also been created that allows any source to reach the public IP address on port
80. The web server is still not reachable from the Internet on port 80. Which configuration change is needed?

The intrusion policy must be disabled for port 80.

The access policy rule must be configured for the action trust.

The NAT policy must be modified to translate the source IP address as well as destination IP address.

The access policy must allow traffic to the internal web server IP address.

NEW QUESTION 200
An engineer configures a network discovery policy on Cisco FMC. Upon configuration, it is noticed that excessive and misleading events filing the database and overloading the Cisco FMC. A monitored NAT device is executing multiple updates of its operating system in a short period of time. What configurationchange must be made to alleviate this issue?

Leave default networks.

Change the method to TCP/SYN.

Increase the number of entries on the NAT device.

Exclude load balancers and NAT devices.

NEW QUESTION 201
In which two places can thresholding settings be configured? (Choose two.)

on each IPS rule

globally, within the network analysis policy

globally, per intrusion policy

on each access control rule

per preprocessor, within the network analysis policy

NEW QUESTION 202
Which interface type allows packets to be dropped?

passive

inline

ERSPAN

TAP

NEW QUESTION 203
An engineer is configuring URL filtering for a Cisco FTD device in Cisco FMC. Users must receive a warning when they access http:/’www.Dac’additstte.corn with the option of continuing to the website if they choose to. No other websites should be blacked. Which two actions must the engineer lake to meet these requirements? (Choose two.)

On the HTTP Responses tab of the access control policy editor, set the Block Response Page to Custom.

On the HTTP Responses tab of the access control policy editor, sot the Interactive Block Response Page to system-provided.

Configure the default action for the access control policy to Interactive Block.

Configure an access control rule that matches the Adult URL category and se: the action to interactive Block.

Configure an access control rule that matches an URL object for http://www.badaduitslte.com; and set the action to interactive Block.

NEW QUESTION 204
An engineer wants to change an existing transparent Cisco FTD to routed mode.
The device controls traffic between two network segments. Which action is mandatory to allow hosts to reestablish communication between these two segments after the change?

remove the existing dynamic routing protocol settings.

configure multiple BVIs to route between segments.

assign unique VLAN IDs to each firewall interface.

implement non-overlapping IP subnets on each segment.

NEW QUESTION 205
An engineer is investigating connectivity problems on Cisco Firepower that is using service group tags. Specific devices are not being tagged correctly, which is preventing clients from using the proper policies when going through the firewall How is this issue resolved?

Use traceroute with advanced options.

Use Wireshark with an IP subnet filter.

Use a packet capture with match criteria.

Use a packet sniffer with correct filtering

NEW QUESTION 206

Refer to the exhibit. A Cisco Secure Firewall Management Center, 7.0 device fails to receive intelligence feed updates. The Cisco Secure Firewall Management Center is configured to use a proxy server that performs SSL inspection. Which action allows the Cisco Secure Firewall Management Center device to download the intelligence feed updates?

Install a self-signed certificate on the proxy server for intelligence.sourcefire.com.

Verify that the proxy server can use HTTPS to communicate to the internet.

Ensure that proxy authentication is disabled for the Cisco Secure Firewall Management Center device.

Bypass the proxy server for intelligence.sourcefire.com.

NEW QUESTION 207
A network administrator is reviewing a weekly scheduled attacks risk report and notices a host that is flagged for an impact 2 attack. Where should the administrator look within Cisco FMC to find out more relevant information about this host and attack?

Analysis > Lookup > Whols

Analysis > Correlation > Correlation Events

Analysis > Hosts > Vulnerabilities

Analysis > Hosts > Host Attributes

NEW QUESTION 208
A network administrator is reviewing a weekly scheduled attacks risk report and notices a host that is flagged for an Impact 2 attack. Where should the administrator look within Cisco FMC to find out more relevant information about this host and attack?

Analysis > Lookup > Whois

Analysis > Correlation > Correlation Events

Analysis > Hosts > Vulnerabilities

Analysis > Hosts > Host Attributes

NEW QUESTION 209

Refer to the exhibit. Users attempt to connect to numerous external resources on various TCP ports. If the users mistype the port, their connection closes immediately, and it takes more than one minute before the connection is torn down. An engineer manages to capture both types of connections as shown in the exhibit.
What must the engineer configure to lower the timeout values for the second group of connections and resolve the user issues?

outbound access rule that allows the entire ICMP protocol suite

inbound access rule that allows ICMP Type 3 from outside

inbound access rule that allows TCP reset packets from outside

outbound access rule with the Block with reset action

NEW QUESTION 210
A network engineer wants to add a third-party threat feed into the Cisco FMC for enhanced threat detection Which action should be taken to accomplish this goal?

Enable Threat Intelligence Director using STIX and TAXII

Enable Rapid Threat Containment using REST APIs

Enable Threat Intelligence Director using REST APIs

Enable Rapid Threat Containment using STIX and TAXII

NEW QUESTION 211
Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?

configure coredump packet-engine enable

capture-traffic

capture

capture WORD

NEW QUESTION 212
An engineer currently has a Cisco FTD device registered to the Cisco FMC and is assigned the address of 10 10.50.12. The organization is upgrading the addressing schemes and there is a requirement to convert the addresses to a format that provides an adequate amount of addresses on the network.
What should the engineer do to ensure that the new addressing takes effect and can be used for the Cisco FTD to Cisco FMC connection?

Delete and reregister the device to Cisco FMC

Update the IP addresses from IFV4 to IPv6 without deleting the device from Cisco FMC

Format and reregister the device to Cisco FMC.

Cisco FMC does not support devices that use IPv4 IP addresses.

NEW QUESTION 213
An engineer is building a new access control policy using Cisco FMC. The policy must inspect a unique IPS policy as well as log rule matching. Which action must be taken to meet these requirements?

Configure an IPS policy and enable per-rule logging.

Disable the default IPS policy and enable global logging.

Configure an IPS policy and enable global logging.

Disable the default IPS policy and enable per-rule logging.

NEW QUESTION 214
An administrator is attempting to add a Cisco Secure Firewall Threat Defence device to Cisco Secure Firewall Management Center with a password of Cisco0480846211 480846211. The private IP address of the FMC server is 192.168.75.201. Which command must be used in order to accomplish this task?

configure manager add 192.168.75.201/24 <reg_key>

configure manager add 192.168.75.201 <reg_key>

configure manager add 192.168.45.45 <reg_key> <nal-ld>

configure manager add 192.168.75.201 255.255.255.0 <reg_key>

NEW QUESTION 215
An engineer must configure a correlation policy in Cisco Secure Firewall Management Center to detect when an IP address from an internal network communicates with a known malicious host. Connections made by the internal IP addresses must be tracked, and an external dynamic list must be used for the condition. Which type of event must the engineer configure on the correlation policy?

Intrusion Impact Alert

Connection tracker

Network discovery

Malware