300-710 Practice Test

300-710 Practice Test practice questions, page 12 of 18, with answer review and explanations.

Question 56

An engineer configures an access control rule that deploys file policy configurations to security zone or tunnel zones, and it causes the device to restart. What is the reason for the restart?

  1. Source or destination security zones in the access control rule matches the security zones that are associated with interfaces on the target devices.
  2. The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the destination policy.
  3. Source or destination security zones in the source tunnel zone do not match the security zones that are associated with interfaces on the target devices.
  4. The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the source policy.

Question 57

An engineer is attempting to create a new dashboard within the Cisco FMC to have a single view with widgets from many of the other dashboards. The goal is to have a mixture of threat and security related widgets along with Cisco Firepower device health information. Which two widgets must be configured to provide this information? (Choose two.)

  1. Intrusion Events
  2. Correlation Information
  3. Appliance Status
  4. Current Sessions
  5. Network Compliance

Question 58

There is an increased amount of traffic on the network and for compliance reasons, management needs visibility into the encrypted traffic. What is a result of enabling TLS/SSL decryption to allow this visibility?

  1. It prompts the need for a corporate managed certificate.
  2. It will fail if certificate pinning is not enforced.
  3. It has minimal performance impact.
  4. It is not subject to any Privacy regulations.

Question 59

An organization is setting up two new Cisco FTD devices to replace their current firewalls and cannot have any network downtime. During the setup process, the synchronization between the two devices is failing. What action is needed to resolve this issue?

  1. Confirm that both devices are running the same software version.
  2. Confirm that both devices are configured with the same types of interfaces.
  3. Confirm that both devices have the same flash memory sizes.
  4. Confirm that both devices have the same port-channel numbering.

Question 60

An organization wants to secure traffic from their branch office to the headquarters building using Cisco Firepower devices. They want to ensure that their Cisco Firepower devices are not wasting resources on inspecting the VPN traffic. What must be done to meet these requirements?

  1. Configure the Cisco Firepower devices to bypass the access control policies for VPN traffic.
  2. Tune the intrusion policies in order to allow the VPN traffic through without inspection.
  3. Configure the Cisco Firepower devices to ignore the VPN traffic using prefilter policies.
  4. Enable a flexconfig policy to re-classify VPN traffic so that it no longer appears as interesting traffic.