あなたを合格させる300-740お手軽に試験合格リアル300-740練習問題集で更新されたのは2026年03月29日 [Q13-Q29]

あなたを合格させる300-740お手軽に試験合格リアル300-740練習問題集で更新されたのは2026年03月29日

2026年最新の実際に出ると確認されたで無料Cisco 300-740試験問題

Cisco 300-740 認定試験の出題範囲：

トピック	出題範囲
トピック 1	Threat Response: This section of the exam measures skills of Incident Response Engineers and focuses on responding to threats through automation and data analysis. It covers how to act based on telemetry and audit reports, manage user or application compromises, and implement response steps such as containment, reporting, remediation, and reinstating services securely.
トピック 2	SAFE Key Structure: This section of the exam measures skills of Network Security Designers and focuses on the SAFE framework's key structural elements. It includes understanding ‘Places in the Network’—the different network zones—and defining ‘Secure Domains’ to organize security policy implementation effectively.
トピック 3	Network and Cloud Security:This section of the exam measures skills of Network Security Engineers and covers policy design for secure access to cloud and SaaS applications. It outlines techniques like URL filtering, app control, blocking specific protocols, and using firewalls and reverse proxies. The section also addresses security controls for remote users, including VPN-based and application-based access methods, as well as policy enforcement at the network edge.
トピック 4	Visibility and Assurance: This section of the exam measures skills of Security Operations Center (SOC) Analysts and focuses on monitoring, diagnostics, and compliance. It explains the Cisco XDR solution, discusses visibility automation, and describes tools for traffic analysis and log management. The section also involves diagnosing application access issues, validating telemetry for behavior analysis, and verifying user access with tools like firewall logs, Duo, and Cisco Secure Workload.
トピック 5	Cloud Security Architecture: This section of the exam measures the skills of Cloud Security Architects and covers the fundamental components of the Cisco Security Reference Architecture. It introduces the role of threat intelligence in identifying and mitigating risks, the use of security operations tools for monitoring and response, and the mechanisms of user and device protection. It also includes strategies for securing cloud and on-premise networks, as well as safeguarding applications, workloads, and data across environments.
トピック 6	SAFE Architectural Framework: This section of the exam measures skills of Security Architects and explains the Cisco SAFE framework, a structured model for building secure networks. It emphasizes the importance of aligning business goals with architectural decisions to enhance protection across the enterprise.
トピック 7	Integrated Architecture Use Cases: This section of the exam measures the skills of Cloud Solution Architects and covers key capabilities within an integrated cloud security architecture. It focuses on ensuring common identity across platforms, setting multicloud policies, integrating secure access service edge (SASE), and implementing zero-trust network access models for more resilient cloud environments.
トピック 8	User and Device Security: This section of the exam measures skills of Identity and Access Management Engineers and deals with authentication and access control for users and devices. It covers how to use identity certificates, enforce multifactor authentication, define endpoint posture policies, and configure single sign-on (SSO) and OIDC protocols. The section also includes the use of SAML to establish trust between devices and applications.

質問 # 13
In the context of threat response, "reinstantiate" primarily means:

A. Maintaining the compromised state for forensic analysis
B. Ignoring the incident after containment
C. Permanently disabling compromised accounts
D. Restoring services or applications to their operational state after a security incident

正解：D

質問 # 14
An organization is distributed across several sites. Each site is connected to the main HQ using site-to-site VPNs implemented using Secure Firewall Threat Defense. Which functionality must be implemented if the security manager wants to send SaaS traffic directly to the internet?

A. Policy-based routing
B. IPsec tunnels
C. ECMP routing
D. Multi-instances

正解：A

解説：
Policy-Based Routing (PBR) enables routing decisions based on criteria such as source IP, destination IP, or application. To send SaaS traffic (e.g., Office 365, Salesforce) directly to the internet rather than over a site-to- site VPN, PBR must be configured at each site firewall. According to SCAZT Section 1 (Cloud Security Architecture, Pages 18-20), this approach enables secure local internet breakout-commonly used in direct internet access (DIA) architectures.
Reference: Designing and Implementing Secure Cloud Access for Users and Endpoints (SCAZT), Section 1, Pages 18-20

質問 # 15
SAML and OIDC are both standards used for:

A. User and device authentication in single sign-on scenarios
B. Physical security of devices
C. Web filtering
D. Encrypting data on a device

正解：A

質問 # 16
The primary purpose of using a web application firewall (WAF) is to:

A. Limit the number of users accessing a web application
B. Increase website loading times
C. Monitor the content that users post on the web application
D. Protect web applications from vulnerabilities and attacks like SQL injection and XSS

正解：D

質問 # 17
Response automation tools help in:

A. Slowing down the detection of malware
B. Quickly isolating infected devices from the network
C. Complicating incident response procedures
D. Increasing the number of false positives

正解：B

質問 # 18
Which attack mitigation must be in place to prevent an attacker from authenticating to a service using a brute force attack?

A. Use of a password manager
B. Forced password change every 6 months
C. Use of multifactor authentication for all accounts
D. Use of a 100 ms delay between each authentication

正解：C

解説：
Multifactor Authentication (MFA) is one of the most effective mitigations against brute-force attacks. Even if an attacker guesses or steals a user's password, they would still need a second authentication factor (e.g., push notification, hardware token, biometric verification) to complete login.
SCAZT Section 2: User and Device Security (Pages 40-43) emphasizes the importance of MFA in protecting identities from password spraying, credential stuffing, and brute-force attacks.
Reference: Designing and Implementing Secure Cloud Access for Users and Endpoints (SCAZT), Section 2, Pages 40-43

質問 # 19
Cisco Secure Workload is used for:

A. Encrypting email communications
B. Increasing the workload on servers
C. Reducing application functionality
D. Enforcing security policies within application workloads

正解：D

質問 # 20
Determine cloud platform security policies based on application connectivity requirements might involve:

A. Configuring firewalls and access lists
B. Implementing network peering
C. Selecting appropriate cloud service models (IaaS, PaaS, SaaS)
D. Avoiding the use of security groups and ACLs

正解：A、B、C

質問 # 21
What helps prevent drive-by compromise?

A. Incognito browsing
B. VPN
C. Ad blockers
D. Browsing known websites

正解：C

解説：
A drive-by compromise occurs when malicious code is automatically downloaded and executed simply by visiting a compromised website-often through malicious advertising scripts (malvertising). According to SCAZT Section 4: Application and Data Security (Pages 85-87), ad blockers help prevent drive-by downloads by blocking these third-party ad scripts and redirections, which are commonly used in such attacks.
VPNs and private browsing modes (e.g., Incognito) do not provide protection against malicious content hosted on web pages.
Reference: Designing and Implementing Secure Cloud Access for Users and Endpoints (SCAZT), Section 4, Pages 85-87
=========

質問 # 22

Refer to the exhibit. An engineer must troubleshoot an issue with excessive SSH traffic leaving the internal network between the hours of 18:00 and 08:00. The engineer applies a policy to the Cisco ASA firewall to block outbound SSH during the indicated hours; however, the issue persists. What should be done to meet the requirement?

A. Change the time of rule 2.
B. Change the time of rule 5
C. Delete rule 3
D. Delete rule 4

正解：C

解説：
Rule 3 allows all traffic (including SSH) from 10.1.0.0/30 during the hours of 18:00-08:00, which directly conflicts with Rule 1 that is intended to deny SSH at those same hours. Since firewall rules are evaluated top- down and Rule 3 allows traffic during the exact period where SSH should be blocked, deleting Rule 3 will allow Rule 1 to apply correctly.
This behavior is explained in SCAZT Section 3 (Network and Cloud Security, Pages 72-75), where rule precedence and time-based evaluation logic are discussed.
Reference: Designing and Implementing Secure Cloud Access for Users and Endpoints (SCAZT), Section 3, Pages 72-75

質問 # 23
Based on telemetry reports, actions might include adjusting _________ to better protect against identified threats.

A. office layouts
B. hiring practices
C. marketing strategies
D. security policies

正解：D

質問 # 24
Network protocol blocking, such as FTP and BitTorrent, is crucial for:

A. Simplifying network configuration
B. Enhancing the performance of cloud applications
C. Preventing data exfiltration and limiting malware spread
D. Allowing unrestricted data transfer

正解：C

質問 # 25
For a web application, configuring SAML authentication means:

A. Users need a different password for each service
B. The application can only be accessed through a specific device
C. Users can sign in once to access multiple applications without re-authenticating
D. The application will not support multifactor authentication

正解：C

質問 # 26
When diagnosing issues with user application and workload access, which Cisco tool can provide actionable insights?

A. Cisco Secure Network Analytics
B. Cisco Secure Cloud Analytics
C. Cisco Secure Cloud Insights
D. All of the above

正解：D

質問 # 27
For enforcing application policy at the network security edge, which of the following are critical?

A. Enforcing uniform policies without considering individual application requirements
B. Ignoring encrypted traffic as it is considered secure
C. Integrating endpoint security for comprehensive network protection
D. Implementing dynamic security policies based on application behavior and user context

正解：C、D

質問 # 28
OIDC stands for OpenID Connect.
What is it used for in the context of identity management?