Download Certifications-CCNP Security, Cisco Certified Specialist -Network Security Firepower.CertDumps.300-710.2020-08-31.1e.32q.vcex


Download Exam

File Info

Exam Certifications: CCNP Security, Cisco Certified Specialist - Network Security Firepower
Number 300-710
File Name Certifications-CCNP Security, Cisco Certified Specialist -Network Security Firepower.CertDumps.300-710.2020-08-31.1e.32q.vcex
Size 218 Kb
Posted August 31, 2020
Downloads 25


How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase
Coupon: EXAMFILESCOM

Coupon: EXAMFILESCOM
With discount: 20%


ProfExam Simulator ProfExam Simulator ProfExam Simulator ProfExam Simulator ProfExam Simulator
 
 


Demo Questions

Question 1
What are the minimum requirements to deploy a managed device inline?

  • A: inline interfaces, security zones, MTU, and mode
  • B: passive interface, MTU, and mode
  • C: inline interfaces, MTU, and mode
  • D: passive interface, security zone, MTU, and mode
Correct Answer: C
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/ips_device_deployments_and_configuration.html



Question 2
What is the difference between inline and inline tap on Cisco Firepower?

  • A: Inline tap mode can send a copy of the traffic to another device.
  • B: Inline tap mode does full packet capture.
  • C: Inline mode cannot do SSL decryption.
  • D: Inline mode can drop malicious traffic.
Correct Answer: D



Question 3
With Cisco Firepower Threat Defense software, which interface mode must be configured to passively receive traffic that passes through the appliance?

  • A: inline set
  • B: passive
  • C: routed
  • D: inline tap
Correct Answer: B
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/interface_overview_for_firepower_threat_defense.html



Question 4
Which two dynamic routing protocols are supported in Firepower Threat Defense without using FlexConfig? (Choose two.)

  • A: EIGRP
  • B: OSPF
  • C: static routing
  • D: IS-IS
  • E: BGP
Correct Answer: CE
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/660/fdm/fptd-fdm-config-guide-660/fptd-fdm-routing.html



Question 5
What are two application layer preprocessors? (Choose two.)

  • A: CIFS
  • B: IMAP
  • C: SSL
  • D: DNP3
  • E: ICMP
Correct Answer: BC
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Application_Layer_Preprocessors.html



Question 6
What is the disadvantage of setting up a site-to-site VPN in a clustered-units environment?

  • A: VPN connections can be re-established only if the failed master unit recovers.
  • B: Smart License is required to maintain VPN connections simultaneously across all cluster units.
  • C: VPN connections must be re-established when a new master unit is elected.
  • D: Only established VPN connections are maintained when a new master unit is elected.
Correct Answer: C
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/fxos/clustering/ftd-cluster-solution.html#concept_g32_yml_y2b



Question 7
Which two statements about bridge-group interfaces in Cisco FTD are true? (Choose two.)

  • A: The BVI IP address must be in a separate subnet from the connected network.
  • B: Bridge groups are supported in both transparent and routed firewall modes.
  • C: Bridge groups are supported only in transparent firewall mode.
  • D: Bidirectional Forwarding Detection echo packets are allowed through the FTD when using bridge-group members.
  • E: Each directly connected network must be on the same subnet.
Correct Answer: CD
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/transparent_or_routed_firewall_mode_for_firepower_threat_defense.html



Question 8
Which command is run on an FTD unit to associate the unit to an FMC manager that is at IP address 10.0.0.10, and that has the registration key Cisco123?

  • A: configure manager local 10.0.0.10 Cisco123
  • B: configure manager add Cisco123 10.0.0.10
  • C: configure manager local Cisco123 10.0.0.10
  • D: configure manager add 10.0.0.10 Cisco123
Correct Answer: D
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/misc/fmc-ftd-mgmt-nw/fmc-ftd-mgmt-nw.html#id_106101



Question 9
Which two routing options are valid with Cisco Firepower Threat Defense? (Choose two.)

  • A: BGPv6
  • B: ECMP with up to three equal cost paths across multiple interfaces
  • C: ECMP with up to three equal cost paths across a single interface
  • D: BGPv4 in transparent firewall mode
  • E: BGPv4 with nonstop forwarding
Correct Answer: AC
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/601/configuration/guide/fpmc-config-guide-v601/fpmc-config-guide-v60_chapter_01100011.html#ID-2101-0000000e



Question 10
Which object type supports object overrides?

  • A: time range
  • B: security group tag
  • C: network object
  • D: DNS server group
Correct Answer: C
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Reusable_Objects.html#concept_8BFE8B9A83D742D9B647A74F7AD50053






CONNECT US


ProfExam
PROFEXAM WITH A 20% DISCOUNT

You can buy ProfExam with a 20% discount..

Get Now!


HOW TO OPEN VCEX AND EXAM FILES

Use ProfExam Simulator to open VCEX and EXAM files
ProfExam Screen



HOW TO OPEN VCE FILES

Use VCE Exam Simulator to open VCE files
Avanaset