Test Online Free Cisco 300-710 Exam Questions and Answers
Practice a live sample before buying full access. This page keeps the free 300-710 question set organized by page so visitors and search engines can reach the canonical -questions.html URL directly.
Which Cisco FMC report gives the analyst information about the ports and protocols that are related to the configured sensitive network for analysis?
Answer:
Question 47Selectable Answer
A network engineer implements a new Cisco Firepower device on the network to take advantage of its intrusion detection functionality. There is a requirement to analyze the traffic going across the device, alert on any malicious traffic, and appear as a bump in the wire How should this be implemented?
Answer: Explanation:
Traditionally, a firewall is a routed hop and acts as a default gateway for hosts that connect to one of its screened subnets. A transparent firewall, on the other hand, is a Layer 2
firewall that acts like a “bump in the wire,” or a “stealth firewall,” and is not seen as a router hop to connected devices. However, like any other firewall, access control between interfaces is controlled, and all of the usual firewall checks are in place. Layer 2 connectivity is achieved by using a "bridge group" where you group together the inside and outside interfaces for a network, and the ASA uses bridging techniques to pass traffic between the interfaces. Each bridge group includes a Bridge Virtual Interface (BVI) to which you assign an IP address on the network. You can have multiple bridge groups for multiple networks. In transparent mode, these bridge groups cannot communicate with each other.
https://www.cisco.com/c/en/us/td/docs/security/asa/asa97/configuration/general/asa-97-general-config/intro-fw.html
Question 48Selectable Answer
What is the disadvantage of setting up a site-to-site VPN in a clustered-units environment?
A network administrator cannot select the link to be used for failover when configuring an active/passive HA Cisco FTD pair.
Which configuration must be changed before setting up the high availability pair?
Answer:
Question 51Selectable Answer
Which feature within the Cisco FMC web interface allows for detecting, analyzing and blocking malware in network traffic?
Answer:
Question 52Selectable Answer
Which two routing options are valid with Cisco FTD? (Choose Two)
