CCNP Security SNCF Exam 300-710 Securing Networks with Cisco Firepower (SNCF) Questions

Regina2021-08-16T03:23:05+00:00

By Regina CCNP Security, Cisco, Free Questions Online 300-710, 300-710 free questions, 300-710 questions 0 Comments

As one of the CCNP Security concertration exams, 300-710 Securing Networks with Cisco Firepower (SNCF) exam is to test your knowledge of Cisco Firepower® Threat Defense and Firepower® 7000 and 8000 Series virtual appliances. CCNP Security 300-710 SNCF questions cover each exam point and topic, which are so valid to help candidates to complete the Cisco certification CCNP Security SNCF exam. The latest exam questions for SNCF 300-710 exam will be instant downloaded as a pdf file. Also, we will share SNCF 300-710 free software via mail. With the great ITExamShop 300-710 pdf file and free software, you can pass 300-710 Securing Networks with Cisco Firepower (SNCF) exam in the first try.

Come to read SNCF CCNP Security Certification 300-710 free questions first.

Page 1 of 4

1. Which CLI command is used to control special handling of ClientHello messages?

system support ssl-client-hello-tuning

system support ssl-client-hello-display

system support ssl-client-hello-force-reset

system support ssl-client-hello-reset

2. Which command is typed at the CLI on the primary Cisco FTD unit to temporarily stop running high-availability?

configure high-availability resume

configure high-availability disable

system support network-options

configure high-availability suspend

3. Which command must be run to generate troubleshooting files on an FTD?

system support view-files

sudo sf_troubleshoot.pl

system generate-troubleshoot all

show tech-support

4. When do you need the file-size command option during troubleshooting with packet capture?

when capture packets are less than 16 MB

when capture packets are restricted from the secondary memory

when capture packets exceed 10 GB

when capture packets exceed 32 MB

5. What is a functionality of port objects in Cisco FMC?

to mix transport protocols when setting both source and destination port conditions in a rule

to represent protocols other than TCP, UDP, and ICMP

to represent all protocols in the same way

to add any protocol other than TCP or UDP for source port conditions in access control rules.

6. Within Cisco Firepower Management Center, where does a user add or modify widgets?

dashboard

reporting

context explorer

summary tool

7. A network engineer is configuring URL Filtering on Firepower Threat Defense.

Which two port requirements on the Firepower Management Center must be validated to allow communication with the cloud service? (Choose two.)

outbound port TCP/443

inbound port TCP/80

outbound port TCP/8080

inbound port TCP/443

outbound port TCP/80

8. What is the maximum bit size that Cisco FMC supports for HTTPS certificates?

1024

8192

4096

2048

9. Which limitation applies to Cisco Firepower Management Center dashboards in a multidomain environment?

Child domains can view but not edit dashboards that originate from an ancestor domain.

Child domains have access to only a limited set of widgets from ancestor domains.

Only the administrator of the top ancestor domain can view dashboards.

Child domains cannot view dashboards that originate from an ancestor domain.

10. Which two statements about deleting and re-adding a device to Cisco FMC are true? (Choose two.)

An option to re-apply NAT and VPN policies during registration is available, so users do not need to re-apply the policies after registration is completed.

Before re-adding the device in Cisco FMC, you must add the manager back in the device.

No option to delete and re-add a device is available in the Cisco FMC web interface.

The Cisco FMC web interface prompts users to re-apply access control policies.

No option to re-apply NAT and VPN policies during registration is available, so users need to reapply the policies after registration is completed.

Page 2 of 4

11. What is a behavior of a Cisco FMC database purge?

User login and history data are removed from the database if the User Activity check box is selected.

Data can be recovered from the device.

The appropriate process is restarted.

The specified data is removed from Cisco FMC and kept for two weeks.

12. Which two packet captures does the FTD LINA engine support? (Choose two.)

Layer 7 network ID

source IP

application ID

dynamic firewall importing

protocol

13. Which two features of Cisco AMP for Endpoints allow for an uploaded file to be blocked? (Choose two.)

application blocking

simple custom detection

file repository

exclusions

application whitelisting

14. Which action should you take when Cisco Threat Response notifies you that AMP has identified a file as malware?

Add the malicious file to the block list.

Send a snapshot to Cisco for technical support.

Forward the result of the investigation to an external threat-analysis engine.

Wait for Cisco Threat Response to automatically block the malware.

15. Which Cisco Advanced Malware Protection for Endpoints policy is used only for monitoring endpoint actively?

Windows domain controller

audit

triage

protection

16. What is a valid Cisco AMP file disposition?

non-malicious

malware

known-good

pristine

17. In a Cisco AMP for Networks deployment, which disposition is returned if the cloud cannot be reached?

unavailable

unknown

clean

disconnected

18. Which two remediation options are available when Cisco FMC is integrated with Cisco ISE? (Choose two.)

dynamic null route configured

DHCP pool disablement

quarantine

port shutdown

host shutdown

19. Which connector is used to integrate Cisco ISE with Cisco FMC for Rapid Threat Containment?

pxGrid

FTD RTC

FMC RTC

ISEGrid

20. What is the maximum SHA level of filtering that Threat Intelligence Director supports?

SHA-1024

SHA-4096

SHA-512

SHA-256

Page 3 of 4

21. Drag and Drop Question

Drag and drop the steps to restore an automatic device registration failure on the standby Cisco FMC from the left into the correct order on the right. Not all options are used.

22. With Cisco FirePOWER Threat Defense software, which interface mode do you configure to passively receive traffic that passes the appliance?

transparent

routed

passive

inline set

inline tap

23. Which description of a correlation policy configuration in the Cisco Firepower Management Center is true?

The system displays correlation policies that are created on all of the domains in a multidomain deployment

Deleting a response group deletes the responses of that group

You cannot add a host profile qualification to a correlation rule that is triggered by a malware event

Correlation policy priorities override whitelist priorities

24. What is a result of enabling Cisco FTD clustering?

For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections.

Integrated Routing and Bridging is supported on the master unit.

Site-to-site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails.

All Firepower appliances can support Cisco FTD clustering.

25. Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)

The units must be the same version

Both devices can be part of a different group that must be in the same domain when configured within the FM

The units must be different models if they are part of the same series.

The units must be configured only for firewall routed mode.

The units must be the same model.

26. On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?

transparent inline mode

TAP mode

strict TCP enforcement

propagate link state

27. What are the minimum requirements to deploy a managed device inline?

inline interfaces, security zones, MTU, and mode

passive interface, MTU, and mode

inline interfaces, MTU, and mode

passive interface, security zone, MTU, and mode

28. What is the difference between inline and inline tap on Cisco Firepower?

Inline tap mode can send a copy of the traffic to another device.

Inline tap mode does full packet capture.

Inline mode cannot do SSL decryption.

Inline mode can drop malicious traffic.

29. With Cisco Firepower Threat Defense software, which interface mode must be configured to passively receive traffic that passes through the appliance?

inline set

passive

routed

inline tap

30. Which two deployment types support high availability? (Choose two.)

transparent

routed

clustered

intra-chassis multi-instance

virtual appliance in public cloud

Page 4 of 4

31. What are 2 types or forms of suppression on a FirePower policy (or FTD)?

source

port

rule

protocol

application

32. Which two dynamic routing protocols are supported in FirePower Threat Defense v6.0? (Choose Two)

IS-IS

BGP

OSPF

static routing

EIGRP

33. Which protocol establishes network redundancy in a switched Firepower device deployment?

STP

HSRP

GLBP

VRRP

34. Which interface type allows packets to be dropped?

passive

inline

ERSPAN

TAP

Welcome To Choose Required IT Certification Exams Online

CCNP Security SNCF Exam 300-710 Securing Networks with Cisco Firepower (SNCF) Questions

Come to read SNCF CCNP Security Certification 300-710 free questions first.

Author

Leave a Reply Cancel reply