300-710 Practice Test

300-710 Practice Test practice questions, page 13 of 18, with answer review and explanations.

Question 61

An administrator is working on a migration from Cisco ASA to the Cisco FTD appliance and needs to test the rules without disrupting the traffic. Which policy type should be used to configure the ASA rules during this phase of the migration?

  1. Prefilter
  2. Intrusion
  3. Access Control
  4. Identity

Question 62

A network administrator is seeing an unknown verdict for a file detected by Cisco FTD. Which malware policy configuration option must be selected in order to further analyze the file in the Talos cloud?

  1. malware analysis
  2. dynamic analysis
  3. sandbox analysis
  4. Spero analysis

Question 63

An engineer has been tasked with providing disaster recovery for an organization's primary Cisco FMC. What must be done on the primary and secondary Cisco FMCs to ensure that a copy of the original corporate policy is available if the primary Cisco FMC fails?

  1. Restore the primary Cisco FMC backup configuration to the secondary Cisco FMC device when the primary device fails.
  2. Connect the primary and secondary Cisco FMC devices with Category 6 cables of not more than 10 meters in length.
  3. Configure high-availability in both the primary and secondary Cisco FMCs.
  4. Place the active Cisco FMC device on the same trusted management network as the standby device.

Question 64

An engineer is attempting to add a new FTD device to their FMC behind a NAT device with a NAT ID of ACME001 and a password of Cisco0391521107. Which command set must be used in order to accomplish this?

  1. configure manager add<FMC IP> <registration key>ACME001
  2. configure manager add ACME001<registration key> <FMC IP>
  3. configure manager add <FMC IP>ACME001<registration key>
  4. configure manager add DONTRESOLVE <FMC IP> AMCE001<registration key>

Question 65

Refer to the exhibit. An organization has an access control rule with the intention of sending all social media traffic for inspection. After using the rule for some time, the administrator notices that the traffic is not being inspected, but is being automatically allowed. What must be done to address this issue?

  1. Add the social network URLs to the block list.
  2. Change the intrusion policy to connectivity over security.
  3. Modify the selected application within the rule.
  4. Modify the rule action from trust to allow.