300-710: Certifications: CCNP Security, Cisco Certified Specialist - Network Security Firepower

A Cisco FTD device is running in transparent firewall mode with a VTEP bridge group member ingress interface.

What must be considered by an engineer tasked with specifying a destination MAC address for a packet trace?

The destination MAC address is optional if a VLAN ID value is entered
Only the UDP packet type is supported
The output format option for the packet logs unavailable
The VLAN ID and destination MAC address are optional

Correct answer: A

Explanation:

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/troubleshooting_the_system.html

What is a characteristic of bridge groups on a Cisco FTD?

In routed firewall mode, routing between bridge groups must pass through a routed interface.
In routed firewall mode, routing between bridge groups is supported.
In transparent firewall mode, routing between bridge groups is supported
Routing between bridge groups is achieved only with a router-on-a-stick configuration on a connected router

Correct answer: B

Explanation:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa97/configuration/general/asa-97-general-config/intro-fw.pdf

Network traffic coining from an organization's CEO must never be denied.

Which access control policy configuration option should be used if the deployment engineer is not permitted to create a rule to allow all traffic?

Configure firewall bypass.
Change the intrusion policy from security to balance.
Configure a trust policy for the CEO.
Create a NAT policy just for the CEO.

Correct answer: C

In a multi-tenant deployment where multiple domains are in use. Which update should be applied outside of the Global Domain?

minor upgrade
local import of intrusion rules
Cisco Geolocation Database
local import of major upgrade

Correct answer: C

An engineer configures an access control rule that deploys file policy configurations to security zone or tunnel zones, and it causes the device to restart. What is the reason for the restart?

Source or destination security zones in the access control rule matches the security zones that are associated with interfaces on the target devices.
The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the destination policy.
Source or destination security zones in the source tunnel zone do not match the security zones that are associated with interfaces on the target devices.
The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the source policy.

Correct answer: A

Explanation:

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/policy_management.html

An engineer is attempting to create a new dashboard within the Cisco FMC to have a single view with widgets from many of the other dashboards. The goal is to have a mixture of threat and security related widgets along with Cisco Firepower device health information.

Which two widgets must be configured to provide this information? (Choose two.)

Intrusion Events
Correlation Information
Appliance Status
Current Sessions
Network Compliance

Correct answer: AC

Explanation:

https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/dashboards.html#ID-2206-00000283

An organization is setting up two new Cisco FTD devices to replace their current firewalls and cannot have any network downtime. During the setup process, the synchronization between the two devices is failing.

What action is needed to resolve this issue?

Confirm that both devices have the same port-channel numbering
Confirm that both devices are running the same software version
Confirm that both devices are configured with the same types of interfaces
Confirm that both devices have the same flash memory sizes

Correct answer: B

Explanation:

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/firepower_threat_defense_high_availability.html#Cisco_Reference.dita_cc8821d8-a5a5-49c0-97fddc9b6f7dbad2

An engineer is troubleshooting a device that cannot connect to a web server. The connection is initiated from the Cisco FTD inside interface and attempting to reach 10.0.1.100 over the non-standard port of 9443. The host the engineer is attempting the connection from is at the IP address of 10.20.10.20. In order to determine what is happening to the packets on the network, the engineer decides to use the FTD packet capture tool.

Which capture configuration should be used to gather the information needed to troubleshoot this issue?

Correct answer: B

There is an increased amount of traffic on the network and for compliance reasons, management needs visibility into the encrypted traffic.

What is a result of enabling TLS'SSL decryption to allow this visibility?

It prompts the need for a corporate managed certificate
It has minimal performance impact
It is not subject to any Privacy regulations
It will fail if certificate pinning is not enforced

Correct answer: A

Refer to the exhibit. An organization has an access control rule with the intention of sending all social media traffic for inspection. After using the rule for some time, the administrator notices that the traffic is not being inspected, but is being automatically allowed.

What must be done to address this issue?

Modify the selected application within the rule
Change the intrusion policy to connectivity over security.
Modify the rule action from trust to allow
Add the social network URLs to the block list

Correct answer: A

Vendor:	Cisco
Exam Code:	300-710
Exam Name:	Certifications: CCNP Security, Cisco Certified Specialist - Network Security Firepower
Date:	Dec 30, 2023
File Size:	1 MB
Downloads:	2

Download Certifications: CCNP Security, Cisco Certified Specialist - Network Security Firepower.300-710.Braindump2go.2023-12-30.146q.vcex

How to open VCEX files?

Demo Questions

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

ProfExam at a 20% markdown