無料Cisco 300-710テスト練習問題試験問題集
試験準備には欠かさない！トップクラスのCisco 300-710試験最新版アプリ学習ガイドで練習
質問 # 127
Which two deployment types support high availability? (Choose two.)
- A. clustered
- B. routed
- C. intra-chassis multi-instance
- D. virtual appliance in public cloud
- E. transparent
正解：B、E
解説：
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config- guide-v61/firepower_threat_defense_high_availability.html
質問 # 128
Refer to the exhibit.
And engineer is analyzing the Attacks Risk Report and finds that there are over 300 instances of new operating systems being seen on the network How is the Firepower configuration updated to protect these new operating systems?
- A. Cisco Firepower gives recommendations to update the policies.
- B. Cisco Firepower automatically updates the policies.
- C. The administrator requests a Remediation Recommendation Report from Cisco Firepower
- D. The administrator manually updates the policies.
正解：A
解説：
Explanation
Ref:
https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Tailori
質問 # 129
Refer to the exhibit.
An administrator is looking at some of the reporting capabilities for Cisco Firepower and noticed this section of the Network Risk report showing a lot of SSL activity that cloud be used for evasion. Which action will mitigate this risk?
- A. Use Cisco Tetration to track SSL connections to servers.
- B. Use Cisco AMP for Endpoints to block all SSL connection
- C. Use encrypted traffic analytics to detect attacks
- D. Use SSL decryption to analyze the packets.
正解：D
解説：
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/623/fdm/fptd-fdm-config-guide-623/fptd-fdm-ssl-decryption.html
質問 # 130
What is the benefit of selecting the trace option for packet capture?
- A. The option limits the number of packets that are captured.
- B. The option captures details of each packet.
- C. The option indicates whether the packet was dropped or successful.
- D. The option indicated whether the destination host responds through a different path.
正解：C
質問 # 131
An engineer is configuring a cisco FTD appliance in IPS-only mode and needs to utilize fail-to-wire interfaces.
Which interface mode should be used to meet these requirements?
- A. routed
- B. passive
- C. inline set
- D. transparent
正解：C
質問 # 132
An organization is installing a new Cisco FTD appliance in the network. An engineer is tasked with configuring access between two network segments within the same IP subnet. Which step is needed to accomplish this task?
- A. Add a separate bridge group for each segment.
- B. Assign an IP address to the Bridge Virtual Interface.
- C. Permit BPDU packets to prevent loops.
- D. Specify a name for the bridge group.
正解：B
質問 # 133
A company is in the process of deploying intrusion prevention with Cisco FTDs managed by a Cisco FMC. An engineer must configure policies to detect potential intrusions but not block the suspicious traffic. Which action accomplishes this task?
- A. Configure IPS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by unchecking the "Drop when inline" option.
- B. Configure IDS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by checking the "Drop when inline" option.
- C. Configure IPS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by checking the "Drop when inline" option.
- D. Configure IDS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by unchecking the "Drop when inline" option.
正解：A
質問 # 134
An engineer has been tasked with providing disaster recovery for an organization's primary Cisco FMC. What must be done on the primary and secondary Cisco FMCs to ensure that a copy of the original corporate policy is available if the primary Cisco FMC fails?
- A. Connect the primary and secondary Cisco FMC devices with Category 6 cables of not more than 10 meters in length.
- B. Restore the primary Cisco FMC backup configuration to the secondary Cisco FMC device when the primary device fails
- C. Configure high-availability in both the primary and secondary Cisco FMCs
- D. Place the active Cisco FMC device on the same trusted management network as the standby device
正解：B
質問 # 135
An engineer is attempting to add a new FTD device to their FMC behind a NAT device with a NAT ID of ACME001 and a password of Cisco388267669. Which command set must be used in order to accomplish this?
- A. configure manager add DONTRESOLVE <FMC IP> AMCE001 <registration key>
- B. configure manager add <FMC IP> ACME0O1 <registration key>
- C. configure manager add <FMC IP> registration key> ACME001
- D. configure manager add ACME001 <registration key> <FMC IP>
正解：C
質問 # 136
An administrator is attempting to add a new FTD device to their FMC behind a NAT device with a NAT ID of NAT001 and a password of Cisco0420l06525. The private IP address of the FMC server is 192.168.45.45. which is being translated to the public IP address of 209.165.200.225/27. Which command set must be used in order to accomplish this task?
- A. configure manager add 192.168.45,45 <reg_key> <nat_id>
- B. configure manager add 209.165.200.225 255.255.255.224 <reg_key> <nat_id>
- C. configure manager add 209.165.200.225/27 <reg_key> <nat_id>
- D. configure manager add 209.165.200.225 <reg_key> <nat_id>
正解：D
質問 # 137
Refer to the exhibit.
A systems administrator conducts a connectivity test to their SCCM server from a host machine and gets no response from the server. Which action ensures that the ping packets reach the destination and that the host receives replies?
- A. Modify the Snort rules to allow ICMP traffic.
- B. Create an ICMP allow list and add the ICMP destination to remove it from the implicit deny list.
- C. Create an access control policy rule that allows ICMP traffic.
- D. Configure a custom Snort signature to allow ICMP traffic after Inspection.
正解：C
質問 # 138
On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?
- A. propagate link state
- B. transparent inline mode
- C. strict TCP enforcement
- D. TAP mode
正解：A
解説：
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config- guide-v64/inline_sets_and_passive_interfaces_for_firepower_threat_defense.html
質問 # 139
With Cisco Firepower Threat Defense software, which interface mode must be configured to passively receive traffic that passes through the appliance?
- A. inline set
- B. routed
- C. passive
- D. inline tap
正解：C
解説：
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/interface_overview_for_firepower_threat_defense.html
質問 # 140
What is the maximum bit size that Cisco FMC supports for HTTPS certificates?
- A. 0
- B. 1
- C. 2
- D. 3
正解：D
解説：
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config- guide-v61/system_configuration.html
質問 # 141
What is a behavior of a Cisco FMC database purge?
- A. The appropriate process is restarted.
- B. The specified data is removed from Cisco FMC and kept for two weeks.
- C. Data can be recovered from the device.
- D. User login and history data are removed from the database if the User Activity check box is selected.
正解：A
質問 # 142
An administrator is attempting to add a Cisco Secure Firewall Threat Defence device to Cisco Secure Firewall Management Center with a password of Cisco0480846211 480846211. The private IP address of the FMC server is 192.168.75.201. Which command must be used in order to accomplish this task?
- A. configure manager add 192.168.75.201/24 <reg_key>
- B. configure manager add 192.168.45.45 <reg_key> <nal-ld>
- C. configure manager add 192.168.75.201 255.255.255.0 <reg_key>
- D. configure manager add 192.16875.201 <reg_key>
正解：D
解説：
To add a Cisco Secure Firewall Threat Defense (FTD) device to Cisco Secure Firewall Management Center (FMC), the correct command to use is configure manager add 192.168.75.201 <reg_key>. This command registers the FTD device with the FMC using the FMC's IP address and the registration key provided during the FMC setup.
Command structure:
* configure manager add <FMC_IP> <reg_key>
For the given scenario:
* FMC IP address: 192.168.75.201
* Registration key: provided during FMC setup
Thus, the correct command is:
* configure manager add 192.168.75.201 <reg_key>
References: Cisco Secure Firewall Management Center Device Configuration Guide, Chapter on Device Registration.
質問 # 143
An engineer is tasked with deploying an internal perimeter firewall that will support multiple DMZs Each DMZ has a unique private IP subnet range. How is this requirement satisfied?
- A. Deploy the firewall in routed mode with NAT configured.
- B. Deploy the firewall in transparent mode with access control policies.
- C. Deploy the firewall in transparent mode with NAT configured.
- D. Deploy the firewall in routed mode with access control policies.
正解：D
質問 # 144
A network engineer is deploying a Cisco Firepower 4100 appliance and must configure a multi-instance environment for high availability. Drag and drop me actions from the left into sequence on the right far this configuration.
正解：
解説：
Explanation
The correct sequence of actions for configuring a multi-instance environment for high availability on a Cisco Firepower 4100 appliance is as follows:
Add a resource profile for container instances. A resource profile defines the CPU, RAM, and disk space allocation for each container instance. You can create multiple resource profiles with different resource settings and assign them to different container instances1.
Add a MAC pool prefix and view the MAC address for the container instance interfaces. A MAC pool prefix is a 24-bit prefix that is used to generate MAC addresses for the container instance interfaces.
You can specify a custom MAC pool prefix or use the default one. You can also view the MAC addresses that are assigned to each container instance interface1.
Configure interfaces. You need to configure the physical interfaces, EtherChannels, and VLAN subinterfaces that will be used by the container instances. You can also configure shared interfaces that can be used by multiple container instances on the same security module/engine1.
Add a Standalone Firepower Threat Defense for Cisco Secure Firewall Management Center. You need to add a logical device that runs a standalone Firepower Threat Defense (FTD) application instance and register it with the Cisco Secure Firewall Management Center (FMC). This logical device will act as the management interface for the container instances1.
Add a high-availability pair. You need to add another logical device that runs a standalone FTD application instance and register it with the FMC as well. Then, you need to configure high availability (HA) between the two standalone FTD logical devices. This will enable HA for the container instances that are associated with them1.
質問 # 145
An engineer is troubleshooting a device that cannot connect to a web server. The connection is initiated from the Cisco FTD inside interface and attempting to reach 10.0.1.100 over the non-standard port of 9443 The host the engineer is attempting the connection from is at the IP address of 10.20.10.20. In order to determine what is happening to the packets on the network, the engineer decides to use the FTD packet capture tool Which capture configuration should be used to gather the information needed to troubleshoot this issue?
A)
B)
C)
D)
- A. Option C
- B. Option D
- C. Option B
- D. Option A
正解：C
質問 # 146
A network administrator is configuring Snort inspection policies and is seeing failed deployment messages in Cisco FMC. What information should the administrator generate for Cisco TAC to help troubleshoot?
- A. A "troubleshoot" file for the Cisco FMC.
- B. A "show tech" file for the device in question.
- C. A "troubleshoot" file for the device in question.
- D. A "show tech" for the Cisco FMC.
正解：C
質問 # 147
An engineer is setting up a new Firepower deployment and is looking at the default FMC policies to start the implementation During the initial trial phase, the organization wants to test some common Snort rules while still allowing the majority of network traffic to pass Which default policy should be used?
- A. Balanced Security and Connectivity
- B. Maximum Detection
- C. Security Over Connectivity
- D. Connectivity Over Security
正解：A
解説：
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/623/fdm/fptd-fdm-config-guide-623/fptd-fdm-intrusion.html
質問 # 148
An administrator is adding a QoS policy to a Cisco FTD deployment. When a new rule is added to the policy and QoS is applied on 'Interfaces in Destination Interface Objects", no interface objects are available What is the problem?
- A. QoS is available only on routed interfaces, and this device is in transparent mode.
- B. A conflict exists between the destination interface types that is preventing QoS from being added
- C. The FTD is out of available resources lor use. so QoS cannot be added
- D. The network segments that the interfaces are on do not have contiguous IP space
正解：A
質問 # 149
Which action should you take when Cisco Threat Response notifies you that AMP has identified a file as malware?
- A. Forward the result of the investigation to an external threat-analysis engine.
- B. Add the malicious file to the block list.
- C. Wait for Cisco Threat Response to automatically block the malware.
- D. Send a snapshot to Cisco for technical support.
正解：B
質問 # 150
......
今すぐ300-710問題を使おう300-710問題集PDF：https://jp.fast2test.com/300-710-premium-file.html
問題集練習試験問題学習ガイドは300-710試験にはこれ：https://drive.google.com/open?id=1bzbUvB-f652jMKBSKWSXBWXUluW4ASai