300-710 Actual Exam Questions

Last updated on Dec. 13, 2024.
Vendor:Cisco
Exam Code:300-710
Exam Name:Securing Networks with Cisco Firepower (300-710 SNCF)
Exam Questions:327
 

Topic 1 - Single Topic

Question #1 Topic 1

What is a result of enabling Cisco FTD clustering?

  • A. For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections.
  • B. Integrated Routing and Bridging is supported on the master unit.
  • C. Site-to-site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails.
  • D. All Firepower appliances support Cisco FTD clustering.
Reveal Solution Hide Solution   Discussion   3

Correct Answer: C 🗳️
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/ clustering_for_the_firepower_threat_defense.html

Question #2 Topic 1

Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)

  • A. The units must be the same version
  • B. Both devices can be part of a different group that must be in the same domain when configured within the FMC.
  • C. The units must be different models if they are part of the same series.
  • D. The units must be configured only for firewall routed mode.
  • E. The units must be the same model.
Reveal Solution Hide Solution   Discussion   1

Correct Answer: AE 🗳️
Reference:
https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/212699-configure-ftd-high-availability-on-firep.html

Question #3 Topic 1

On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?

  • A. transparent inline mode
  • B. TAP mode
  • C. strict TCP enforcement
  • D. propagate link state
Reveal Solution Hide Solution   Discussion   18

Correct Answer: B 🗳️

Question #4 Topic 1

What are the minimum requirements to deploy a managed device inline?

  • A. inline interfaces, security zones, MTU, and mode
  • B. passive interface, MTU, and mode
  • C. inline interfaces, MTU, and mode
  • D. passive interface, security zone, MTU, and mode
Reveal Solution Hide Solution   Discussion   9

Correct Answer: C 🗳️
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/ ips_device_deployments_and_configuration.html

Question #5 Topic 1

What is the difference between inline and inline tap on Cisco Firepower?

  • A. Inline tap mode can send a copy of the traffic to another device.
  • B. Inline tap mode does full packet capture.
  • C. Inline mode cannot do SSL decryption.
  • D. Inline mode can drop malicious traffic.
Reveal Solution Hide Solution   Discussion   11

Correct Answer: D 🗳️

Question #6 Topic 1

With Cisco FTD software, which interface mode must be configured to passively receive traffic that passes through the appliance?

  • A. inline set
  • B. passive
  • C. routed
  • D. inline tap
Reveal Solution Hide Solution   Discussion   28

Correct Answer: D 🗳️

Question #7 Topic 1

Which two deployment types support high availability? (Choose two.)

  • A. transparent
  • B. routed
  • C. clustered
  • D. intra-chassis multi-instance
  • E. virtual appliance in public cloud
Reveal Solution Hide Solution   Discussion   4

Correct Answer: AB 🗳️

Question #8 Topic 1

Which protocol establishes network redundancy in a switched Firepower device deployment?

  • A. STP
  • B. HSRP
  • C. GLBP
  • D. VRRP
Reveal Solution Hide Solution   Discussion   2

Correct Answer: A 🗳️
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/ firepower_threat_defense_high_availability.html

Question #9 Topic 1

Which interface type allows packets to be dropped?

  • A. passive
  • B. inline
  • C. ERSPAN
  • D. TAP
Reveal Solution Hide Solution   Discussion   1

Correct Answer: B 🗳️
Reference:
https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200908-configuring-firepower-threat-defense-int.html

Question #10 Topic 1

Which Cisco Firepower Threat Defense, which two interface settings are required when configuring a routed interface? (Choose two.)

  • A. Redundant Interface
  • B. EtherChannel
  • C. Speed
  • D. Media Type
  • E. Duplex
Reveal Solution Hide Solution   Discussion   1

Correct Answer: CE 🗳️
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/610/fdm/fptd-fdm-config-guide-610/fptd-fdm-interfaces.html

file Viewing page 1 out of 33 pages.
Viewing questions 1-10 out of 327 questions
Next Questions
Browse atleast 50% to increase passing rate cup
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago