Download Certifications-CCNP Security, Cisco Certified Specialist -Network Security Firepower.CertDumps.300-710.2020-09-20.1e.45q.vcex

Download Exam

File Info

Exam Certifications: CCNP Security, Cisco Certified Specialist - Network Security Firepower
Number 300-710
File Name Certifications-CCNP Security, Cisco Certified Specialist -Network Security Firepower.CertDumps.300-710.2020-09-20.1e.45q.vcex
Size 224 Kb
Posted September 20, 2020
Downloads 23

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase
Coupon: EXAM_HUB

Discount: 20%

ProfExam Simulator ProfExam Simulator ProfExam Simulator ProfExam Simulator ProfExam Simulator
 
 


Demo Questions

Question 1
On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?

  • A: transparent inline mode
  • B: TAP mode
  • C: strict TCP enforcement
  • D: propagate link state
Correct Answer: D
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/inline_sets_and_passive_interfaces_for_firepower_threat_defense.html



Question 2
What are the minimum requirements to deploy a managed device inline?

  • A: inline interfaces, security zones, MTU, and mode
  • B: passive interface, MTU, and mode
  • C: inline interfaces, MTU, and mode
  • D: passive interface, security zone, MTU, and mode
Correct Answer: C
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/ips_device_deployments_and_configuration.html



Question 3
What is the difference between inline and inline tap on Cisco Firepower?

  • A: Inline tap mode can send a copy of the traffic to another device.
  • B: Inline tap mode does full packet capture.
  • C: Inline mode cannot do SSL decryption.
  • D: Inline mode can drop malicious traffic.
Correct Answer: D



Question 4
With Cisco Firepower Threat Defense software, which interface mode must be configured to passively receive traffic that passes through the appliance?

  • A: inline set
  • B: passive
  • C: routed
  • D: inline tap
Correct Answer: B
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/interface_overview_for_firepower_threat_defense.html



Question 5
Which protocol establishes network redundancy in a switched Firepower device deployment?

  • A: STP
  • B: HSRP
  • C: GLBP
  • D: VRRP
Correct Answer: A
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/firepower_threat_defense_high_availability.html



Question 6
Which two dynamic routing protocols are supported in Firepower Threat Defense without using FlexConfig? (Choose two.)

  • A: EIGRP
  • B: OSPF
  • C: static routing
  • D: IS-IS
  • E: BGP
Correct Answer: CE
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/660/fdm/fptd-fdm-config-guide-660/fptd-fdm-routing.html



Question 7
Which policy rule is included in the deployment of a local DMZ during the initial deployment of a Cisco NGFW through the Cisco FMC GUI?

  • A: a default DMZ policy for which only a user can change the IP addresses.
  • B: deny ip any
  • C: no policy rule is included
  • D: permit ip any
Correct Answer: C



Question 8
What are two application layer preprocessors? (Choose two.)

  • A: CIFS
  • B: IMAP
  • C: SSL
  • D: DNP3
  • E: ICMP
Correct Answer: BC
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Application_Layer_Preprocessors.html



Question 9
Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD? (Choose two.)

  • A: OSPFv2 with IPv6 capabilities
  • B: virtual links
  • C: SHA authentication to OSPF packets
  • D: area boundary router type 1 LSA filtering
  • E: MD5 authentication to OSPF packets
Correct Answer: BD
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/ospf_for_firepower_threat_defense.html



Question 10
What is the disadvantage of setting up a site-to-site VPN in a clustered-units environment?

  • A: VPN connections can be re-established only if the failed master unit recovers.
  • B: Smart License is required to maintain VPN connections simultaneously across all cluster units.
  • C: VPN connections must be re-established when a new master unit is elected.
  • D: Only established VPN connections are maintained when a new master unit is elected.
Correct Answer: C
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/fxos/clustering/ftd-cluster-solution.html#concept_g32_yml_y2b






CONNECT US


ProfExam
PROFEXAM WITH A 20% DISCOUNT

You can buy ProfExam with a 20% discount..

Get Now!


HOW TO OPEN VCEX AND EXAM FILES

Use ProfExam Simulator to open VCEX and EXAM files
ProfExam Screen



HOW TO OPEN VCE FILES

Use VCE Exam Simulator to open VCE files
Avanaset