Cisco 300-710 Quiz 2 Topic 2 Questions 6-10

Question: 1

An engineer is configuring a second Cisco FMC as a standby device but is unable to register with the active unit. What is causing this issue?

AThe primary FMC currently has devices connected to it.

BThe code versions running on the Cisco FMC devices are different

CThe licensing purchased does not include high availability

DThere is only 10 Mbps of bandwidth between the two devices.

Show Answer

Question: 2

An organization has implemented Cisco Firepower without IPS capabilities and now wants to enable inspection

for their traffic. They need to be able to detect protocol anomalies and utilize the Snort rule sets to detect

malicious behavior. How is this accomplished?

AModify the network discovery policy to detect new hosts to inspect.

BModify the access control policy to redirect interesting traffic to the engine.

CModify the intrusion policy to determine the minimum severity of an event to inspect.

DModify the network analysis policy to process the packets for inspection.

Show Answer

Question: 3

An organization has a compliancy requirement to protect servers from clients, however, the clients and servers all reside on the same Layer 3 network Without readdressing IP subnets for clients or servers, how is segmentation achieved"?

ADeploy a firewall in transparent mode between the clients and servers.

BChange the IP addresses of the clients, while remaining on the same subnet.

CDeploy a firewall in routed mode between the clients and servers

DChange the IP addresses of the servers, while remaining on the same subnet

Show Answer

Question: 4

In a multi-tenant deployment where multiple domains are in use. which update should be applied outside of the Global Domain?

Aminor upgrade

Blocal import of intrusion rules

CCisco Geolocation Database

Dlocal import of major upgrade

Show Answer

Question: 5

An engineer configures an access control rule that deploys file policy configurations to security zone or tunnel zones, and it causes the device to restart. What is the reason for the restart?

ASource or destination security zones in the access control rule matches the security zones that are associated with interfaces on the target devices.

BThe source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the destination policy.

CSource or destination security zones in the source tunnel zone do not match the security zones that are associated with interfaces on the target devices.

DThe source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the source policy.

Show Answer

Cisco 300-710 Quiz:2 Topic:2 Questions:6-10