Cisco 300-710 Quiz 1 Topic 5 Questions 1-5

Question: 1

An engineer is attempting to create a new dashboard within the Cisco FMC to have a single view with widgets

from many of the other dashboards. The goal is to have a mixture of threat and security related widgets along

with Cisco Firepower device health information. Which two widgets must be configured to provide this

information? (Choose two.)

AIntrusion Events

BCorrelation Information

CAppliance Status

DCurrent Sessions

ENetwork Compliance

Show Answer

Question: 2

An engineer configures an access control rule that deploys file policy configurations to security zones, and it cause the device to restart. What is the reason for the restart?

ASource or destination security zones in the access control rule matches the security zones that are associated with interfaces on the target devices.

BThe source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the destination policy.

CSource or destination security zones in the source tunnel zone do not match the security zones that are associated with interfaces on the target devices.

DThe source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the source policy.

Show Answer

Question: 3

An engineer is attempting to create a new dashboard within the Cisco FMC to have a single view with widgets from many of the other dashboards. The goal is to have a mixture of threat and security related widgets along with Cisco Firepower device health information Which two widgets must be configured to provide this information? (Choose two.)

AIntrusion Events

BCorrelation Information

CAppliance Status

DCurrent Sessions

ENetwork Compliance

Show Answer

Question: 4

An engineer is vorlang on a LAN switch and has noticed that its network connection to the mime Cisco IPS has gone down Upon troubleshooting it is determined that the switch is working as expected What must have been implemented for this failure to occur?

AThe upstream router has a misconfigured routing protocol

BLink-state propagation is enabled

CThe Cisco IPS has been configured to be in fail-open mode

DThe Cisco IPS is configured in detection mode

Show Answer

Question: 5

Refer to the exhibit An engineer is modifying an access control pokey to add a rule to inspect all DNS traffic that passes through the firewall After making the change and deploying the pokey they see that DNS traffic is not bang inspected by the Snort engine What is the problem?

AThe rule must specify the security zone that originates the traffic

BThe rule must define the source network for inspection as well as the port

CThe action of the rule is set to trust instead of allow.

DThe rule is configured with the wrong setting for the source port

Show Answer

Cisco 300-710 Quiz:1 Topic:5 Questions:1-5