[Q110-Q125] 300-710 by Cisco Actual Free Exam Questions And Answers [UPDATED 2023]

Q110. A network administrator is implementing an active/passive high availability Cisco FTD pair.
When adding the high availability pair, the administrator cannot select the secondary peer.
What is the cause?

The second Cisco FTD is not the same model as the primary Cisco FTD.

An high availability license must be added to the Cisco FMC before adding the high availability pair.

The failover link must be defined on each Cisco FTD before adding the high availability pair.

Both Cisco FTD devices are not at the same software Version

Q111. Which Firepower feature allows users to configure bridges in routed mode and enables devices to perform Layer 2 switching between interfaces?

FlexConfig

BDI

SGT

IRB

Q112. An engineer Is configuring a Cisco FTD device to place on the Finance VLAN to provide additional protection tor company financial data. The device must be deployed without requiring any changes on the end user workstations, which currently use DHCP lo obtain an IP address. How must the engineer deploy the device to meet this requirement?

Deploy the device in routed mode and allow DHCP traffic in the access control policies.

Deploy the device in routed made aid enable the DHCP Relay feature.

Deploy the device in transparent mode and allow DHCP traffic in the access control policies

Deploy the device in transparent mode and enable the DHCP Server feature.

Q113. Which command is run on an FTD unit to associate the unit to an FMC manager that is at IP address
10.0.0.10, and that has the registration key Cisco123?

configure manager local 10.0.0.10 Cisco123

configure manager add Cisco123 10.0.0.10

configure manager local Cisco123 10.0.0.10

configure manager add 10.0.0.10 Cisco123

Q114. A network security engineer must export packet captures from the Cisco FMC web browser while troubleshooting an issue. When navigating to the address Error! Hyperlink reference not valid. IP>/capture/CAPI/pcap/test.pcap. an error 403: Forbidden is given instead of the PCAP file. Which action must the engineer take to resolve this issue?

Disable the HTTPS server and use HTTP instead.

Enable the HTTPS server for the device platform policy.

Disable the proxy setting on the browser.

Use the Cisco FTD IP address as the proxy server setting on the browser.

Q115. An administrator needs to configure Cisco FMC to send a notification email when a data transfer larger than 10 MB is initiated from an internal host outside of standard business hours. Which Cisco FMC feature must be configured to accomplish this task?

file and malware policy

application detector

intrusion policy

correlation policy

Q116. An organization wants to secure traffic from their branch office to the headquarter building using Cisco Firepower devices, They want to ensure that their Cisco Firepower devices are not wasting resources on inspecting the VPN traffic. What must be done to meet these requirements?

Configure the Cisco Firepower devices to ignore the VPN traffic using prefilter policies

Enable a flexconfig policy to re-classify VPN traffic so that it no longer appears as interesting traffic

Configure the Cisco Firepower devices to bypass the access control policies for VPN traffic.

Tune the intrusion policies in order to allow the VPN traffic through without inspection

Q117. Which CLI command is used to generate firewall debug messages on a Cisco Firepower?

system support firewall-engine-debug

system support ssl-debug

system support platform

system support dump-table

Q118. A company is in the process of deploying intrusion prevention with Cisco FTDs managed by a Cisco FMC. An engineer must configure policies to detect potential intrusions but not block the suspicious traffic. Which action accomplishes this task?

Configure IDS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by unchecking the “Drop when inline” option.

Configure IPS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by checking the “Drop when inline” option.

Configure IPS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by unchecking the “Drop when inline” option.

Configure IDS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by checking the “Drop when inline” option.

Q119. What are the minimum requirements to deploy a managed device inline?

inline interfaces, security zones, MTU, and mode

passive interface, MTU, and mode

inline interfaces, MTU, and mode

passive interface, security zone, MTU, and mode

Q120. An engineer has been tasked with using Cisco FMC to determine if files being sent through the network are malware. Which two configuration takes must be performed to achieve this file lookup? (Choose two.)

The Cisco FMC needs to include a SSL decryption policy.

The Cisco FMC needs to connect to the Cisco AMP for Endpoints service.

The Cisco FMC needs to connect to the Cisco ThreatGrid service directly for sandboxing.

The Cisco FMC needs to connect with the FireAMP Cloud.

The Cisco FMC needs to include a file inspection policy for malware lookup.

Q121. Which two deployment types support high availability? (Choose two.)

transparent

routed

clustered

intra-chassis multi-instance

virtual appliance in public cloud

Q122. An engineer is configuring multiple Cisco FTD appliances (or use in the network. Which rule must the engineer follow while defining interface objects in Cisco FMC for use with interfaces across multiple devices?

An interface cannot belong to a security zone and an interface group

Interface groups can contain multiple interface types

Interface groups can contain interfaces from many devices.

Two security zones can contain the same interface

Q123. An administrator is creating interface objects to better segment their network but is having trouble adding interfaces to the objects. What is the reason for this failure?

The interfaces are being used for NAT for multiple networks.

The administrator is adding interfaces of multiple types.

The administrator is adding an interface that is in multiple zones.

The interfaces belong to multiple interface groups.

Q124. Which command must be run to generate troubleshooting files on an FTD?

system support view-files

sudo sf_troubleshoot.pl

system generate-troubleshoot all

show tech-support

Q125. The event dashboard within the Cisco FMC has been inundated with low priority intrusion drop events, which are overshadowing high priority events. An engineer has been tasked with reviewing the policies and reducing the low priority events. Which action should be configured to accomplish this task?

generate events

drop packet

drop connection

drop and generate