CCNP SNCF 300-710 Practice Questions & Answers • ExamPrepare

Question 1

A security engineer must create a Network Operations Center dashboard to display detailed information about the events collected by Secure Firewall Management Center. A Custom Analysis widget must be configured to display how many intrusion events of each type occurred by using the Intrusion Events table, with the data aggregated by Event Count. Which field must be configured to create the widget?

Device field and data aggregated by Event Count
Date field and data aggregated by Unique Events
Classification field and data aggregated by Event Count
Time field and data aggregated by Unique Events

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

A network engineer is converting a Secure Firewall Threat Defense device managed by Secure Firewall Management Center from routed mode to transparent mode. The Secure Firewall Threat Defense device has been deregistered from Secure Firewall Management Center and converted to transparent mode using CLI. Which action must the network engineer take next to complete the implementation?

Register the device again with Secure Firewall Management Center.
Connect Secure Firewall Device Manager to the Secure Firewall Threat Defense device.
Use the Secure Firewall Threat Defense CLI to configure access rules.
Paste the base64-encoded SSL certificate over a console connection.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

Refer to the exhibit. An engineer configures a NAT rule allowing clients to use the internet only if clients are located on the directly connected internal network. Dynamic auto PAT must be configured. Drag and drop the NAT rules from the left onto the corresponding targets on the right. Not all options are used.

NAT rule

type

source interface objects

destination interface objects

original source

translated source

Question 4

What is needed to start a threat investigation in Cisco XDR?

local IP address
indicator of compromise
indicator of attack
user name

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

An engineer must deploy URL filtering in Cisco Secure Firewall Management Center. The engineer is configuring the URL condition for an access control rule to filter URLs that display bad behavior, malicious or undesirable. Which reputation level must be configured?

Questionable
Untrusted
Neutral
Favorable

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

An engineer at a company is configuring Cisco Secure Firewall Threat Defense managed by a Cisco Secure Firewall Management Center appliance. The company wants traffic to keep flowing even in the failure of SNORT. What must the engineer configure to meet the requirement?

Application Bypass
Compliance Mode
Object Group Search
Transfer Packets

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.