300-710 試験問題と解答 - 模擬練習 - 練習問題・模擬試験

Question No : 1
What is a valid Cisco AMP file disposition?

A.non-malicious
B.malware
C.known-good
D.pristine

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Reference_a_wrapper_Chapter_topic_here.html

Question No : 2
Which Cisco Advanced Malware Protection for Endpoints policy is used only for monitoring endpoint actively?

A.Windows domain controller
B.audit
C.triage
D.protection

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/214933-amp-for-endpoints-deployment-methodology.html

Question No : 3
Which action should you take when Cisco Threat Response notifies you that AMP has identified a file as malware?

A.Add the malicious file to the block list.
B.Send a snapshot to Cisco for technical support.
C.Forward the result of the investigation to an external threat-analysis engine.
D.Wait for Cisco Threat Response to automatically block the malware.

正解:

Question No : 4
Which two features of Cisco AMP for Endpoints allow for an uploaded file to be blocked? (Choose two.)

A.application blocking
B.simple custom detection
C.file repository
D.exclusions
E.application whitelisting

正解:

Question No : 5
Which two packet captures does the FTD LINA engine support? (Choose two.)

A.Layer 7 network ID
B.source IP
C.application ID
D.dynamic firewall importing
E.protocol

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212474-working-with-firepower-threat-defense-f.html

Question No : 6
What is a behavior of a Cisco FMC database purge?

A.User login and history data are removed from the database if the User Activity check box is selected.
B.Data can be recovered from the device.
C.The appropriate process is restarted.
D.The specified data is removed from Cisco FMC and kept for two weeks.

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/management_center_database_purge.pdf

Question No : 7
Which two statements about deleting and re-adding a device to Cisco FMC are true? (Choose two.)

A.An option to re-apply NAT and VPN policies during registration is available, so users do not need to re-apply the policies after registration is completed.
B.Before re-adding the device in Cisco FMC, you must add the manager back in the device.
C.No option to delete and re-add a device is available in the Cisco FMC web interface.
D.The Cisco FMC web interface prompts users to re-apply access control policies.
E.No option to re-apply NAT and VPN policies during registration is available, so users need to re-apply the policies after registration is completed.

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Device_Management_Basics.html

Question No : 8
Which limitation applies to Cisco Firepower Management Center dashboards in a multidomain environment?

A.Child domains can view but not edit dashboards that originate from an ancestor domain.
B.Child domains have access to only a limited set of widgets from ancestor domains.
C.Only the administrator of the top ancestor domain can view dashboards.
D.Child domains cannot view dashboards that originate from an ancestor domain.

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Using_Dashboards.html

Question No : 9
What is the maximum bit size that Cisco FMC supports for HTTPS certificates?

A.1024
B.8192
C.4096
D.2048

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/system_configuration.html

Question No : 10
A network engineer is configuring URL Filtering on Firepower Threat Defense.
Which two port requirements on the Firepower Management Center must be validated to allow communication with the cloud service? (Choose two.)

A.outbound port TCP/443
B.inbound port TCP/80
C.outbound port TCP/8080
D.inbound port TCP/443
E.outbound port TCP/80

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/SecurityInternet_Accessand_Communication_Ports.html

Question No : 11
Within Cisco Firepower Management Center, where does a user add or modify widgets?

A.dashboard
B.reporting
C.context explorer
D.summary tool

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Using_Dashboards.html

Question No : 12
What is a functionality of port objects in Cisco FMC?

A.to mix transport protocols when setting both source and destination port conditions in a rule
B.to represent protocols other than TCP, UDP, and ICMP
C.to represent all protocols in the same way
D.to add any protocol other than TCP or UDP for source port conditions in access control rules.

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/reusable_objects.html

Question No : 13
When do you need the file-size command option during troubleshooting with packet capture?

A.when capture packets are less than 16 MB
B.when capture packets are restricted from the secondary memory
C.when capture packets exceed 10 GB
D.when capture packets exceed 32 MB

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/troubleshooting_the_system.html

Question No : 14
Which command must be run to generate troubleshooting files on an FTD?

A.system support view-files
B.sudo sf_troubleshoot.pl
C.system generate-troubleshoot all
D.show tech-support

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/security/sourcefire-defense-center/117663-technote-SourceFire-00.html

Question No : 15
Which command is typed at the CLI on the primary Cisco FTD unit to temporarily stop running high-availability?

A.configure high-availability resume
B.configure high-availability disable
C.system support network-options
D.configure high-availability suspend

正解:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/firepower_threat_defense_high_availability.html

Cisco 300-710 問題練習