Online Access Free 300-710 Exam Questions

Which two types of objects are reusable and supported by Cisco FMC? (Choose two.)

• A.reputation-based objects that represent Security Intelligence feeds and lists, application filters based on category and reputation, and file lists
• B.dynamic key mapping objects that help link HTTP and HTTPS GET requests to Layer 7 application protocols.
• C.reputation-based objects, such as URL categories
• D.network-based objects that represent IP address and networks, port/protocols pairs, VLAN tags, security zones, and origin/destination country
• E.network-based objects that represent FQDN mappings and networks, port/protocol pairs, VXLAN tags, security zones and origin/destination country

An analyst is investigating a potentially compromised endpoint within the network and pulls a host report for the endpoint in question to collect metrics and documentation. What information should be taken from this report for the investigation?

• A.client applications by user, web applications, and user connections
• B.threat detections over time and application protocols transferring malware
• C.number of attacked machines, sources of the attack, and traffic patterns
• D.intrusion events, host connections, and user sessions

Which interface type allows packets to be dropped?

• A.passive
• B.TAP
• C.ERSPAN
• D.inline

A network engineer must configure the cabling between a Cisco Secure Firewall Threat Defense appliance and a network so the Secure Firewall Threat Defense appliance performs inline to analyze and tune generated intrusion events before going live. Which Secure Firewall Threat Defense interface mode must the engineer use?

• A.strict TCP enforcement
• B.link state propagation
• C.bypass
• D.tap mode

What is the disadvantage of setting up a site-to-site VPN in a clustered-units environment?

• A.VPN connections can be re-established only if the failed master unit recovers.
• B.Smart License is required to maintain VPN connections simultaneously across all cluster units.
• C.VPN connections must be re-established when a new master unit is elected.
• D.Only established VPN connections are maintained when a new master unit is elected.