Exam 300-710 topic 1 question 304 discussion

Actual exam question from Cisco's 300-710

Question #: 304
Topic #: 1

A network administrator is reviewing a packet capture. The packet capture from inside of Cisco Secure Firewall Threat Defense shows the inbound TCP traffic. However, the outbound TCP traffic is not seen in the packet capture from outside Secure Firewall Threat Defense. Which configuration change resolves the issue?

A. Packet capture must include UDP traffic.
B. Inside interface must be assigned a higher security level.
C. Route to the destination must be added.
D. Inside interface must be assigned a lower security level.

Show Suggested Answer

Suggested Answer: C 🗳️

by Doris8000 at Aug. 3, 2024, 2:58 p.m.

Comments

Submit Cancel

tinyJoe

1 week, 6 days ago

Selected Answer: C

I am not sure, but the only option available is C. First of all, A is totally WTF. As for B and D, the security level, this is a value that must be set for each interface in ASA, but is not used for anything at all in FTD. https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/760/management-center-admin-76/health-troubleshoot.html#:~:text=The%20threat%20defense%20does%20not%20use%20the%20security%20level%20for%20anything

upvoted 2 times

...

Doris8000

5 months, 2 weeks ago

indeed when an info is missing the traffic is dropped, if it was a sec level issue the traffic will be denied and it will be shown in the packet cap

upvoted 2 times

...

Exam 300-710 All Questions

View all questions & answers for the 300-710 exam

Exam 300-710 topic 1 question 304 discussion

Comments

tinyJoe

Doris8000

SY0-701