300-710試験無料問題集（445題）「Cisco Securing Networks with Cisco Firepower 認定」

出題：1

A network administrator is configuring an FTD in transparent mode. A bridge group is set up and an access policy has been set up to allow all IP traffic. Traffic is not passing through the FTD.
What additional configuration is needed?

A. An IP address must be assigned to the BVI.

B. A mac-access control list must be added to allow all MAC addresses.

C. A default route must be added to the FTD.

D. The security levels of the interfaces must be set.

正解：A 解答を投票する

出題：2

An engineer has been tasked with performing an audit of network objects to determine which objects are duplicated across the various firewall models (Cisco Secure Firewall Threat Defense, Cisco Secure Firewall ASA, and Meraki MX Series) deployed throughout the company. Which tool will assist the engineer in performing that audit?

A. Cisco Secure Firewall Management Center

B. Cisco SecureX

C. Cisco Firepower Device Manager

D. Cisco Defense Orchestrator

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

An analyst is reviewing the Cisco FMC reports for the week. They notice that some peer-to-peer applications are being used on the network and they must identify which poses the greatest risk to the environment. Which report gives the analyst this information?

A. Advanced Malware Risk Report

B. User Risk Report

C. Attacks Risk Report

D. Network Risk Report

正解：D 解答を投票する

出題：4

A network engineer is configuring URL Filtering on Firepower Threat Defense. Which two port requirements on the Firepower Management Center must be validated to allow communication with the cloud service? (Choose two.)

A. outbound port TCP/443

B. inbound port TCP/80

C. inbound port TCP/443

D. outbound port TCP/80

E. outbound port TCP/8080

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

What is the difference between inline and inline tap on Cisco Firepower?

A. Inline mode cannot do SSL decryption.

B. Inline mode can drop malicious traffic.

C. Inline tap mode can send a copy of the traffic to another device.

D. Inline tap mode does full packet capture.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

A security analyst must create a new report within Cisco FMC to show an overview of the daily attacks, vulnerabilities, and connections. The analyst wants to reuse specific dashboards from other reports to create this consolidated one. Which action accomplishes this task?

A. Use the import feature in the newly created report to select which dashboards to add.

B. Copy the Malware Report and modify the sections to pull components from other reports.

C. Modify the Custom Workflows within the Cisco FMC to feed the desired data into the new report.

D. Create a new dashboard object via Object Management to represent the desired views.

正解：A 解答を投票する

出題：7

An engineer integrates Cisco FMC and Cisco ISE using pxGrid. Which role is assigned for Cisco FMC?

A. client

B. publisher

C. server

D. controller

正解：A 解答を投票する

出題：8

A network administrator is migrating from a Cisco ASA to a Cisco FTD. EIGRP is configured on the Cisco ASA but it is not available in the Cisco FMC. Which action must the administrator take to enable this feature on the Cisco FTD?

A. Configure EIGRP parameters using FlexConfig objects.

B. Add the command feature eigrp via the FTD CLI.

C. Create a custom variable set and enable the feature in the variable set.

D. Enable advanced configuration options in the FMC.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

300-710試験無料問題集「Cisco Securing Networks with Cisco Firepower 認定」