Free Cisco 300-710 Exam Questions

Become Cisco Certified with updated 300-710 exam questions and correct answers

Page: 1 / 89

Total 444 Questions | Updated On: Sep 30, 2026

Add To Cart

Question 1

Refer to the exhibit.An engineer is analyzing an event in Cisco Secure Firewall Management Center Considering this log entry,which specific security threat is observed?

A : information leak

B : privilege escalation

C : denial of service

D : memory exhaustion

Answer: B

Question 2

An organization is migrating their Cisco ASA devices running in multicontext mode to Cisco FTD devices. Which action must be taken to ensure that each context on the Cisco ASA is logically separated in the Cisco FTD devices?

A : Add a native instance to distribute traffic to each Cisco FTD context.

B : Add the Cisco FTD device to the Cisco ASA port channels.

C : Configure a container instance in the Cisco FTD for each context in the Cisco ASA.

D : Configure the Cisco FTD to use port channels spanning multiple networks.

Answer: C

Question 3

A consultant Is working on a project where the customer is upgrading from a single Cisco Firepower 2130 managed by FDM to a pair of Cisco Firepower 2130s managed oy FMC tor nigh availability. The customer wants the configures of the existing device being managed by FDM to be carried over to FMC and then replicated to the additional: device being added to create the high availability pair. Which action must the consultant take to meet this requirement?

A : The current FDM configuration must be configured by hand into FMC before the devices are registered.

B : The current FDM configuration will be converted automatically into FMC when the device registers.

C : The current FDM configuration must be migrated to FMC using the Secure Firewall Migration Tool.

D : The FTD configuration must be converted to ASA command format, which can then be migrated to FMC.

Answer: B

Question 4

An organization has implemented Cisco Firepower without IPS capabilities and now wants to enable inspection for their traffic. They need to be able to detect protocol anomalies and utilize the Snort rule sets to detect malicious behaviour. How is this accomplished?

A : dify the access control policy to redirect interesting traffic to the engine

B : dify the network discovery policy to detect new hosts to inspect

C : dify the network analysis policy to process the packets for inspection

D : dify the intrusion policy to determine the minimum severity of an event to inspect.

Answer: D

Question 5

An engineer must configure a SPAN session to monitor traffic by using a Cisco Secure IPS device in passive mode. Cisco Secure IPS interface Gi0/1 is connected to Cisco Catalyst switch interface Gi0/3. Which SPAN configuration meets the requirement?

A : Switch(config)# monitor source interface Gi0/1Switch(config)# monitor destination interface Gi0/3

B : Switch(config)# monitor session 1 source interface Gi0/3Switch(config)# monitor session 1 destinationinterface Gi0/3

C : Switch(config)# monitor session 1 source interface Gi0/1Switch(config)# monitor session 1 destinationinterface Gi0/3

Answer: C

Page: 1 / 89

Total 444 Questions | Updated On: Sep 30, 2026

Add To Cart