Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home Cisco® 300-710

Cisco® 300-710 Exam Practice Questions (P. 1)

  • Full Access (393 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #1
What is a result of enabling Cisco FTD clustering?
  1. A
    For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections.
  2. B
    Integrated Routing and Bridging is supported on the master unit.
  3. C
    Site-to-site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails.
  4. D
    All Firepower appliances support Cisco FTD clustering.

Correct Answer:
C
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/ clustering_for_the_firepower_threat_defense.html

Question #2
Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)
  1. A
    The units must be the same version
  2. B
    Both devices can be part of a different group that must be in the same domain when configured within the FMC.
  3. C
    The units must be different models if they are part of the same series.
  4. D
    The units must be configured only for firewall routed mode.
  5. E
    The units must be the same model.

Correct Answer:
AE
Reference:
https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/212699-configure-ftd-high-availability-on-firep.html

Question #3
On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?
  1. A
    transparent inline mode
  2. B
    TAP mode
  3. C
    strict TCP enforcement
  4. D
    propagate link state

Correct Answer:
D
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/ inline_sets_and_passive_interfaces_for_firepower_threat_defense.html

Question #4
What are the minimum requirements to deploy a managed device inline?
  1. A
    inline interfaces, security zones, MTU, and mode
  2. B
    passive interface, MTU, and mode
  3. C
    inline interfaces, MTU, and mode
  4. D
    passive interface, security zone, MTU, and mode

Correct Answer:
C
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/ ips_device_deployments_and_configuration.html

Question #5
What is the difference between inline and inline tap on Cisco Firepower?
  1. A
    Inline tap mode can send a copy of the traffic to another device.
  2. B
    Inline tap mode does full packet capture.
  3. C
    Inline mode cannot do SSL decryption.
  4. D
    Inline mode can drop malicious traffic.

Correct Answer:
D
chatbot-img GPT-4o - Answer
Inline mode actively participates in the traffic flow, allowing Cisco Firepower to not only monitor but also to take action, such as dropping malicious packets based on configured security policies and rules. In contrast, inline tap only monitors and analyzes the traffic by sending a copy to the inspection engine, but it does not have the capability to block or alter the actual traffic flow itself. Thus, inline mode's ability to directly intervene and enforce security measures by dropping traffic is a critical feature, especially for environments where preventing malicious activities is paramount.

Question #6
With Cisco FTD software, which interface mode must be configured to passively receive traffic that passes through the appliance?
  1. A
    inline set
  2. B
    passive
  3. C
    routed
  4. D
    inline tap

Correct Answer:
B
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/ interface_overview_for_firepower_threat_defense.html

Question #7
Which two deployment types support high availability? (Choose two.)
  1. A
    transparent
  2. B
    routed
  3. C
    clustered
  4. D
    intra-chassis multi-instance
  5. E
    virtual appliance in public cloud

Correct Answer:
AB
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/ firepower_threat_defense_high_availability.html

Question #8
Which protocol establishes network redundancy in a switched Firepower device deployment?
  1. A
    STP
  2. B
    HSRP
  3. C
    GLBP
  4. D
    VRRP

Correct Answer:
A
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/ firepower_threat_defense_high_availability.html

Question #9
Which interface type allows packets to be dropped?
  1. A
    passive
  2. B
    inline
  3. C
    ERSPAN
  4. D
    TAP

Correct Answer:
B
Reference:
https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200908-configuring-firepower-threat-defense-int.html

Question #10
Which Cisco Firepower Threat Defense, which two interface settings are required when configuring a routed interface? (Choose two.)
  1. A
    Redundant Interface
  2. B
    EtherChannel
  3. C
    Speed
  4. D
    Media Type
  5. E
    Duplex

Correct Answer:
CE
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/610/fdm/fptd-fdm-config-guide-610/fptd-fdm-interfaces.html

Next Questions

All Pages