Free Cisco 300-710 Exam Questions

Refer to the exhibit.

An engineer is modifying an access control policy to add a rule to Inspect all DNS traffic that passes it

making the change and deploying the policy, they see that DNS traffic Is not being Inspected by the Snort

engine. What is......

A network engineer is configuring URL Filtering on Firepower Threat Defense. Which two port requirements on the Firepower Management Center must be validated to allow communication with the cloud service? (Choose two.)

Which firewall design will allow It to forward traffic at layers 2 and 3 for the same subnet? 

A network administrator is configuring a site-to-site IPsec VPN to a router sitting behind a Cisco FTD. The administrator has configured an access policy to allow traffic to this device on UDP 500, 4500, and ESP VPN traffic is not working. Which action resolves this issue?

Refer to the exhibit. An engineer is configuring a high-availability solution that has the hardware devices and

software versions:

two Cisco Secure Firewall 9300 Security Appliances with FXOS SW 2.0(1.23) software Cisco Secure Firewall Threat Defense 6.0.1.1 (build 1023) on both appliances

one Cisco Secure Firewall Management Center with SW 6.0.1.1 (build 1023)

Which condition must be met to complete the high-availability configuration?