Halloween Special - 75% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: certbig75

300-710 Exam Dumps - Cisco CCNP Security Questions and Answers

Question # 114

What are two application layer preprocessors? (Choose two.)

Options:

A.

CIFS

B.

IMAP

C.

SSL

D.

DNP3

E.

ICMP

Buy Now
Question # 115

A user within an organization opened a malicious file on a workstation which in turn caused a ransomware attack on the network. What should be configured within the Cisco FMC to ensure the file is tested for viruses on a sandbox system?

Options:

A.

Capacity handling

B.

Local malware analysis

C.

Spere analysis

D.

Dynamic analysis

Buy Now
Question # 116

What is a result of enabling Cisco FTD clustering?

Options:

A.

For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections.

B.

Integrated Routing and Bridging is supported on the master unit.

C.

Site-to-site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails.

D.

All Firepower appliances can support Cisco FTD clustering.

Buy Now
Question # 117

A financial services firm is configuring split-tunnel remote access VPN on a Cisco Secure Firewall Threat Defence managed by Cisco Secure Firewall Management Center. Only traffic to 10.0 0.0/8 and 172 16 0 0/12 must traverse the VPN tunnel Internet traffic must exit locally on the client. Internal DNS queries must traverse the VPN tunnel to the corporate DNS server at 10.1.1.53 for the domain corp.finserv.local. Cisco Secure Client is deployed on all endpoints. Which configuration must be done to accomplish the task?

Options:

A.

Implement a split-tunnel exclude list for all public address space, assign 10.1 1 53 as the primary DNS server in the group policy, and enable the Umbrella Roaming Security module to handle DNS queries for non-tunneled traffic.

B.

Configure a split-tunnel include policy scoped to 10.0.0.0/8 and 172.16.0.0/12 in the group policy, and define a split-DNS entry for corp.finserv.local so Secure Client routes matching DNS queries through the tunnel to 10.1.1.53.

C.

Enable full-tunnel mode in the group policy and apply an ACL permitting only RFC-1918 traffic into the tunnel, then assign 10.1.1.53 as the primary DNS server and rely on the Windows DNS suffix search list to handle internal resolution.

D.

Use a network object group containing 10.0.0.0/8 and 172.16.0.0/12 as the split-tunnel include list, assign 8.8.8.8 as the primary DNS server in the group policy, and configure a conditional DNS forwarder on the client for corp finserv.local

Buy Now
Question # 118

Encrypted Visibility Engine (EVE) is enabled under which lab on an access control policy in Cisco Secure Firewall Management Centre?

Options:

A.

Network Analysis Policy

B.

Advanced

C.

Security Intelligence

D.

SSL

Buy Now
Question # 119

With Cisco Firepower Threat Defense software, which interface mode must be configured to passively receive traffic that passes through the appliance?

Options:

A.

inline set

B.

passive

C.

routed

D.

inline tap

Buy Now
Question # 120

When a Cisco FTD device is configured in transparent firewall mode, on which two interface types can an IP address be configured? (Choose two.)

Options:

A.

Diagnostic

B.

EtherChannel

C.

BVI

D.

Physical

E.

Subinterface

Buy Now
Question # 121

Which action should be taken after editing an object that is used inside an access control policy?

Options:

A.

Delete the existing object in use.

B.

Refresh the Cisco FMC GUI for the access control policy.

C.

Redeploy the updated configuration.

D.

Create another rule using a different object name.

Buy Now
Question # 122

What must be implemented on Cisco Firepower to allow multiple logical devices on a single physical device to have access to external hosts?

Options:

A.

Add at least two container instances from the same module.

B.

Set up a cluster control link between all logical devices

C.

Add one shared management interface on all logical devices.

D.

Define VLAN subinterfaces for each logical device.

Buy Now
Question # 123

Which two statements about deleting and re-adding a device to Cisco FMC are true? (Choose two.)

Options:

A.

An option to re-apply NAT and VPN policies during registration is available, so users do not need to re- apply the policies after registration is completed.

B.

Before re-adding the device in Cisco FMC, you must add the manager back in the device.

C.

No option to delete and re-add a device is available in the Cisco FMC web interface.

D.

The Cisco FMC web interface prompts users to re-apply access control policies.

E.

No option to re-apply NAT and VPN policies during registration is available, so users need to re-apply the policies after registration is completed.

Buy Now
Exam Code: 300-710
Exam Name: Securing Networks with Cisco Firepower (300-710 SNCF) v1.2
Last Update: Oct 27, 2026
Questions: 444
300-710 pdf

300-710 PDF

$23.75  $94.99
300-710 Engine

300-710 Testing Engine

$27.5  $109.99
300-710 PDF + Engine

300-710 PDF + Testing Engine

$36.25  $144.99