2022年最新の実際に出ると確認された300-710試験問題集と解答で300-710無料更新
実際問題を使って300-710問題集で100%無料300-710試験問題集
Cisco 300-710 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
| トピック 7 |
|
| トピック 8 |
|
質問 94
Which two statements about deleting and re-adding a device to Cisco FMC are true? (Choose two.)
- A. The Cisco FMC web interface prompts users to re-apply access control policies.
- B. An option to re-apply NAT and VPN policies during registration is available, so users do not need to re- apply the policies after registration is completed.
- C. No option to re-apply NAT and VPN policies during registration is available, so users need to re-apply the policies after registration is completed.
- D. No option to delete and re-add a device is available in the Cisco FMC web interface.
- E. Before re-adding the device in Cisco FMC, you must add the manager back in the device.
正解: A,C
解説:
Section: Management and Troubleshooting
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide- v60/Device_Management_Basics.html
質問 95
After deploying a network-monitoring tool to manage and monitor networking devices in your organization, you realize that you need to manually upload an MIB for the Cisco FMC. In which folder should you upload the MIB file?
- A. /sf/etc/DCEALERT.MIB
- B. /etc/sf/DCMIB.ALERT
- C. /etc/sf/DCEALERT.MIB
- D. system/etc/DCEALERT.MIB
正解: C
解説:
Section: Management and Troubleshooting
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa- firepower-module-user-guide-v541/Intrusion-External-Responses.pdf
質問 96
An administrator is setting up Cisco Firepower to send data to the Cisco Stealthwatch appliances. The NetFlow_Set_Parameters object is already created, but NetFlow is not being sent to the flow collector. What must be done to prevent this from occurring?
- A. Create a Security Intelligence object to send the data to Cisco Stealthwatch
- B. Add the NetFlow_Send_Destination object to the configuration
- C. Add the NetFlow_Add_Destination object to the configuration
- D. Create a service identifier to enable the NetFlow service
正解: A
質問 97
Which two packet captures does the FTD LINA engine support? (Choose two.)
- A. application ID
- B. Layer 7 network ID
- C. dynamic firewall importing
- D. protocol
- E. source IP
正解: D,E
解説:
Section: Management and Troubleshooting
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212474-working-with- firepower-threat-defense-f.html
質問 98
Which two routing options are valid with Cisco Firepower Threat Defense? (Choose two.)
- A. BGPv4 in transparent firewall mode
- B. ECMP with up to three equal cost paths across multiple interfaces
- C. BGPv4 with nonstop forwarding
- D. BGPv6
- E. ECMP with up to three equal cost paths across a single interface
正解: D,E
解説:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/601/configuration/guide/fpmc-config-guide-v601/fpmc-config-guide-v60_chapter_01100011.html#ID-2101-0000000e
質問 99
A network administrator is seeing an unknown verdict for a file detected by Cisco FTD. Which malware policy configuration option must be selected in order to further analyse the file in the Talos cloud?
- A. Spero analysis
- B. Dynamic analysis
- C. Malware analysis
- D. Sandbox analysis
正解: B
解説:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Reference_a_wrapper_Chapter_topic_here.html
質問 100
administrator is configuring SNORT inspection policies and is seeing failed deployment messages in Cisco FMC . What information should the administrator generate for Cisco TAC to help troubleshoot?
- A. A "troubleshoot" file for the Cisco FMC
- B. A "show tech" for the Cisco FMC.
- C. A "show tech" file for the device in question
- D. A Troubleshoot" file for the device in question.
正解: D
質問 101
What is a behavior of a Cisco FMC database purge?
- A. User login and history data are removed from the database if the User Activity check box is selected.
- B. The specified data is removed from Cisco FMC and kept for two weeks.
- C. Data can be recovered from the device.
- D. The appropriate process is restarted.
正解: D
質問 102
In which two places are thresholding settings configured? (Choose two.)
- A. on each access control rule
- B. per preprocessor, within the network analysis policy
- C. globally, per intrusion policy
- D. on each IPS rule
- E. globally, within the network analysis policy
正解: C,D
解説:
Section: Configuration
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa- firepower-module-user-guide-v541/Intrusion-Global-Threshold.pdf
質問 103
Which CLI command is used to control special handling of ClientHello messages?
- A. system support ssl-client-hello-tuning
- B. system support ssl-client-hello-force-reset
- C. system support ssl-client-hello-enabled
- D. system support ssl-client-hello-display
正解: C
解説:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config- guide-v61/firepower_command_line_reference.html
質問 104
Which two statements about bridge-group interfaces in Cisco FTD are true? (Choose two.)
- A. The BVI IP address must be in a separate subnet from the connected network.
- B. Bidirectional Forwarding Detection echo packets are allowed through the FTD when using bridge-group members.
- C. Bridge groups are supported in both transparent and routed firewall modes.
- D. Each directly connected network must be on the same subnet.
- E. Bridge groups are supported only in transparent firewall mode.
正解: C,D
質問 105
Which limitation applies to Cisco FMC dashboards in a multi-domain environment?
- A. Child domains are not able to view dashboards that originate from an ancestor domain.
- B. Only the administrator of the top ancestor domain is able to view dashboards.
- C. Child domains are able to view but not edit dashboards that originate from an ancestor domain.
- D. Child domains have access to only a limited set of widgets from ancestor domains.
正解: A
解説:
Section: Management and Troubleshooting
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide- v60/Using_Dashboards.html
質問 106
What is the advantage of having Cisco Firepower devices send events to Cisco Threat response via the security services exchange portal directly as opposed to using syslog?
- A. Supports all devices that are running supported versions of Firepower
- B. All types of Firepower devices are supported.
- C. An on-premises proxy server does not need to set up and maintained
- D. Firepower devices do not need to be connected to the internet.
正解: C
解説:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/integrations/CTR/ Firepower_and_Cisco_Threat_Response_Integration_Guide.pdf
質問 107
Which protocol establishes network redundancy in a switched Firepower device deployment?
- A. STP
- B. HSRP
- C. VRRP
- D. GLBP
正解: A
解説:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/firepower_threat_defense_high_availability.html
質問 108
When do you need the file-size command option during troubleshooting with packet capture?
- A. when capture packets are less than 16 MB
- B. when capture packets exceed 32 MB
- C. when capture packets exceed 10 GB
- D. when capture packets are restricted from the secondary memory
正解: B
解説:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/troubleshooting_the_system.html
質問 109
A mid-sized company is experiencing higher network bandwidth utilization due to a recent acquisition The network operations team is asked to scale up their one Cisco FTD appliance deployment to higher capacities due to the increased network bandwidth. Which design option should be used to accomplish this goal?
- A. Deploy multiple Cisco FTD HA pairs in clustering mode to increase performance
- B. Deploy multiple Cisco FTD HA pairs to increase performance
- C. Deploy multiple Cisco FTD appliances using VPN load-balancing to scale performance.
- D. Deploy multiple Cisco FTD appliances in firewall clustering mode to increase performance.
正解: D
質問 110
Which command is run at the CLI when logged in to an FTD unit, to determine whether the unit is managed locally or by a remote FMC server?
- A. show running-config | include manager
- B. system generate-troubleshoot
- C. show configuration session
- D. show managers
正解: D
解説:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/command_ref/b_Command_Reference_for_Firepower_Threat_Defense/c_3.html
質問 111
An engineer is using the configure manager add <FMC IP> Cisc402098527 command to add a new Cisco FTD device to the Cisco FMC; however, the device is not being added. Why Is this occurring?
- A. The IP address used should be that of the Cisco FTD. not the Cisco FMC.
- B. The NAT ID is required since the Cisco FMC is behind a NAT device.
- C. The registration key is missing from the command
- D. DONOTRESOLVE must be added to the command
正解: B
質問 112
A network administrator is concerned about (he high number of malware files affecting users' machines. What must be done within the access control policy in Cisco FMC to address this concern?
- A. Create a file policy and set the access control policy to block.
- B. Create an intrusion policy and set the access control policy to block.
- C. Create a file policy and set the access control policy to allow.
- D. Create an intrusion policy and set the access control policy to allow.
正解: A
質問 113
Which Cisco Firepower rule action displays an HTTP warning page?
- A. Monitor
- B. Allow with Warning
- C. Block
- D. Interactive Block
正解: D
解説:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firesight/541/user-guide/FireSIGHT-System- UserGuide-v5401/AC-Rules-Tuning-Overview.html#76698
質問 114
Which CLI command is used to control special handling of ClientHello messages?
- A. system support ssl-client-hello-tuning
- B. system support ssl-client-hello-force-reset
- C. system support ssl-client-hello-enabled
- D. system support ssl-client-hello-display
正解: C
質問 115
Which command is entered in the Cisco FMC CLI to generate a troubleshooting file?
- A. system support diagnostic-cli
- B. show tech-support chassis
- C. show running-config
- D. sudo sf_troubleshoot.pl
正解: D
解説:
Section: Management and Troubleshooting
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/sourcefire-defense-center/117663-technote- SourceFire-00.html
質問 116
Which two types of objects are reusable and supported by Cisco FMC? (Choose two.)
- A. dynamic key mapping objects that help link HTTP and HTTPS GET requests to Layer 7 application protocols.
- B. network-based objects that represent IP address and networks, port/protocols pairs, VLAN tags, security zones, and origin/destination country
- C. reputation-based objects that represent Security Intelligence feeds and lists, application filters based on category and reputation, and file lists
- D. reputation-based objects, such as URL categories
- E. network-based objects that represent FQDN mappings and networks, port/protocol pairs, VXLAN tags, security zones and origin/destination country
正解: B,C
質問 117
......
合格させる300-710試験問題は更新された190問あります：https://jp.fast2test.com/300-710-premium-file.html
300-710試験問題集、テストエンジン練習テスト問題：https://drive.google.com/open?id=1OqdL0gUeN6U-OzYnuqRqRHJdOWYsdQLY