Free Cisco 300-710 Exam Questions

Question 1

administrator is configuring SNORT inspection policies and is seeing failed deployment messages in Cisco FMC . What information should the administrator generate for Cisco TAC to help troubleshoot?

A : A Troubleshoot" file for the device in question.

B : A "show tech" file for the device in question

C : A "show tech" for the Cisco FMC.

D : A "troubleshoot" file for the Cisco FMC

Answer: A

Question 2

A network engineer is extending a user segment through an FTD device for traffic inspection without creating another IP subnet How is this accomplished on an FTD device in routed mode?

A : by leveraging the ARP to direct traffic through the firewall

B : by assigning an inline set interface

C : by using a BVI and create a BVI IP address in the same subnet as the user segment

D : by bypassing protocol inspection by leveraging pre-filter rules

Answer: C

Question 3

A network administrator is trying to configure Active Directory authentication for VPN authentication to a Cisco Secure Firewall Threat Defence instance that is registered with Cisco Secure Firewall Management Center. Which system settings must be configured first in Secure Firewall Management Center to accomplish the goal?

A : Device, Remote Access VPN

B : System, Realms

C : Policies, Authentication

D : Authentication, Device

Answer: B

Question 4

A network administrator is trying to configure Active Directory authentication for VPN authentication to a Cisco Secure Firewall Threat Defence instance that is registered with Cisco Secure Firewall Management Center. Which system settings must be configured first in Secure Firewall Management Center to accomplish the goal?

A : Device, Remote Access VPN

B : System, Realms

C : Policies, Authentication

D : Authentication, Device

Answer: B

Question 5

What is a result of enabling Cisco FTD clustering?

A : For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections.

B : Integrated Routing and Bridging is supported on the master unit.

C : Site-to-site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails.

D : All Firepower appliances can support Cisco FTD clustering.

Answer: C