300-710 Exam Dumps - Cisco CCNP Security Questions and Answers

Question # 134

An engineer Is configuring a Cisco FTD device to place on the Finance VLAN to provide additional protection tor company financial data. The device must be deployed without requiring any changes on the end user workstations, which currently use DHCP lo obtain an IP address. How must the engineer deploy the device to meet this requirement?

Options:

Deploy the device in routed mode and allow DHCP traffic in the access control policies.

Deploy the device in routed made aid enable the DHCP Relay feature.

Deploy the device in transparent mode and allow DHCP traffic in the access control policies

Deploy the device in transparent mode and enable the DHCP Server feature.

Buy Now

Question # 135

An administrator is configuring a transparent Cisco FTD device to receive ERSPAN traffic from multiple switches on a passive port but the FTD is not processing the traffic What is the problem?

Options:

The switches do not have Layer 3 connectivity to the FTD device for GRE traffic transmission.

The FTD must be configured with an ERSPAN port, not a passive port.

The FTD must & e in routed mode to process ERSPAN traffic.

Theswitcheswere not set up with a monitor session ID (hat matches the flow ID defined on the FTD

Buy Now

Question # 136

An engineer is configuring a new Cisco Secure Firewall Management Center appliance. Secure Firewall Management Center must report on peer-to-peer applications used on the network and identify which applications pose the greatest risk to the network. Which template must the engineer configure to generate the report?