Download Certifications-CCNP Security, Cisco Certified Specialist -Network Security Firepower.CertDumps.300-710.2021-12-27.1e.79q.vcex

File Info

Exam	Certifications: CCNP Security, Cisco Certified Specialist - Network Security Firepower
Number	300-710
File Name	Certifications-CCNP Security, Cisco Certified Specialist -Network Security Firepower.CertDumps.300-710.2021-12-27.1e.79q.vcex
Size	282 Kb
Posted	December 27, 2021
Downloads	15

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase
Coupon: EXAM_HUB

Discount: 20%

Demo Questions

Question 1

What is a result of enabling Cisco FTD clustering?

A: For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections.
B: Integrated Routing and Bridging is supported on the master unit.
C: Site-to-site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails.
D: All Firepower appliances can support Cisco FTD clustering.

Correct Answer: C

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/clustering_for_the_firepower_threat_defense.html

Question 2

Which two conditions are necessary for high availability to function between two Cisco FTD devices?
(Choose two.)

A: The units must be the same version
B: Both devices can be part of a different group that must be in the same domain when configured within the FMC.
C: The units must be different models if they are part of the same series.
D: The units must be configured only for firewall routed mode.
E: The units must be the same model.

Correct Answer: AE

Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/212699-configure-ftd-high-availability-on-firep.html

Question 3

On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?

A: transparent inline mode
B: TAP mode
C: strict TCP enforcement
D: propagate link state

Correct Answer: D

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/inline_sets_and_passive_interfaces_for_firepower_threat_defense.html

Question 4

What are the minimum requirements to deploy a managed device inline?

A: inline interfaces, security zones, MTU, and mode
B: passive interface, MTU, and mode
C: inline interfaces, MTU, and mode
D: passive interface, security zone, MTU, and mode

Correct Answer: C

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/ips_device_deployments_and_configuration.html

Question 5

What is the difference between inline and inline tap on Cisco Firepower?

A: Inline tap mode can send a copy of the traffic to another device.
B: Inline tap mode does full packet capture.
C: Inline mode cannot do SSL decryption.
D: Inline mode can drop malicious traffic.

Correct Answer: D

Question 6

With Cisco Firepower Threat Defense software, which interface mode must be configured to passively receive traffic that passes through the appliance?

A: inline set
B: passive
C: routed
D: inline tap

Correct Answer: D

Question 7

Which two deployment types support high availability? (Choose two.)

A: transparent
B: routed
C: clustered
D: intra-chassis multi-instance
E: virtual appliance in public cloud

Correct Answer: AB

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/firepower_threat_defense_high_availability.html

Question 8

Which protocol establishes network redundancy in a switched Firepower device deployment?

A: STP
B: HSRP
C: GLBP
D: VRRP

Correct Answer: A

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/firepower_threat_defense_high_availability.html

Question 9

Which interface type allows packets to be dropped?