300-710 Practice Test

300-710 Practice Test practice questions, page 8 of 18, with answer review and explanations.

Question 36

An organization has a Cisco FTD that uses bridge groups to pass traffic from the inside interfaces to the outside interfaces. They are unable to gather information about neighboring Cisco devices or use multicast in their environment. What must be done to resolve this issue?

  1. Create a firewall rule to allow CDP traffic
  2. Create a bridge group with the firewall interfaces
  3. Change the firewall mode to transparent
  4. Change the firewall mode to routed

Question 37

A network engineer implements a new Cisco Firepower device on the network to take advantage of its intrusion detection functionality. There is a requirement to analyze the traffic going across the device, alert on any malicious traffic, and appear as a bump in the wire. How should this be implemented?

  1. Specify the BVI IP address as the default gateway for connected devices
  2. Enable routing on the Cisco Firepower
  3. Add an IP address to the physical Cisco Firepower interfaces
  4. Configure a bridge group in transparent mode

Question 38

Which two conditions must be met to enable high availability between two Cisco FTD devices? (Choose two.)

  1. same flash memory size
  2. same NTP configuration
  3. same DHCP/PPoE configuration
  4. same host name
  5. same number of interfaces

Question 39

An engineer is building a new access control policy using Cisco FMC. The policy must inspect a unique IPS policy as well as log rule matching. Which action must be taken to meet these requirements?

  1. Configure an IPS policy and enable per-rule logging
  2. Disable the default IPS policy and enable global logging
  3. Configure an IPS policy and enable global logging
  4. Disable the default IPS policy and enable per-rule logging

Question 40

Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD? (Choose two.)

  1. OSPFv2 with IPv6 capabilities
  2. virtual links
  3. SHA authentication to OSPF packets
  4. area boundary router type 1 LSA filtering
  5. MD5 authentication to OSPF packets