300-710 Exam Dumps - Cisco CCNP Security Questions and Answers

Change from Cisco FDM management to Cisco FMC management on both devices and register them to FMC.

Ensure that the two devices are assigned IP addresses from the 169 254.0.0/16 range for failoverinterfaces.

Factory reset the current Cisco FTD so that it can synchronize configurations with the new Cisco FTDdevice.

Ensure that the configured DNS servers match on the two devices for name resolution.

Add the NetFlow_Send_Destination object to the configuration

Create a Security Intelligence object to send the data to Cisco Stealthwatch

Create a service identifier to enable the NetFlow service

Add the NetFlow_Add_Destination object to the configuration

dynamic key mapping objects that help link HTTP and HTTPS GET requests to Layer 7 application protocols.

reputation-based objects that represent Security Intelligence feeds and lists, application filters based on category and reputation, and file lists

network-based objects that represent IP address and networks, port/protocols pairs, VLAN tags, security zones, and origin/destination country

network-based objects that represent FQDN mappings and networks, port/protocol pairs, VXLAN tags, security zones and origin/destination country

reputation-based objects, such as URL categories

/etc/sf/DCMIB.ALERT

/sf/etc/DCEALERT.MIB

/etc/sf/DCEALERT.MIB

system/etc/DCEALERT.MIB

View the system and troubleshooting details.

Select the Secure Firewall Threat Defense device properties.

Select the Secure Firewall Management Center device.

Access the Health Events page.

Access the Health Monitor page.

Attacks Risk Report

User Risk Report

Network Risk Report

Advanced Malware Risk Report

Enable SSL decryption and specify the URL.

Define the URL to be blocked and set the application to HTTP.

Define the URL to be blocked and disable SSL inspection.

Block the category of banking and define the application of WWW.

Malware Report

Host Report

Firepower Report

Network Report

Configure IDS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by unchecking the " Drop when inline " option.

Configure IPS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by checking the " Drop when inline " option.

Configure IPS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by unchecking the " Drop when inline " option.

Configure IDS mode when creating or editing a policy rule under the Cisco FMC Intrusion tab in Access Policies section by checking the " Drop when inline " option.