300-710 Free Practice Test

- (Exam Topic 5)
Which action must be taken on the Cisco FMC when a packet bypass is configured in case the Snort engine is down or a packet takes too long to process?

1. A. Enable Inspect Local Router Traffic
2. B. Enable Automatic Application Bypass
3. C. Configure Fastpath rules to bypass inspection
4. D. Add a Bypass Threshold policy for failures

Correct Answer: B

- (Exam Topic 5)
An engineer must define a URL object on Cisco FMC. What is the correct method to specify the URL without performing SSL inspection?

1. A. Use Subject Common Name value.
2. B. Specify all subdomains in the object group.
3. C. Specify the protocol in the object.
4. D. Include all URLs from CRL Distribution Points.

Correct Answer: B

- (Exam Topic 5)
A network administrator is seeing an unknown verdict for a file detected by Cisco FTD. Which malware policy configuration option must be selected in order to further analyse the file in the Talos cloud?

1. A. Spero analysis
2. B. Malware analysis
3. C. Dynamic analysis
4. D. Sandbox analysis

Correct Answer: B

- (Exam Topic 5)
Which protocol is needed to exchange threat details in rapid threat containment on Cisco FMC?

1. A. SGT
2. B. SNMP v3
3. C. BFD
4. D. pxGrid

Correct Answer: D

- (Exam Topic 5)
An engineer attempts to pull the configuration for a Cisco FTD sensor to review with Cisco TAC but does not have direct access to the CU for the device. The CLl for the device is managed by Cisco FMC to which the engineer has access. Which action in Cisco FMC grants access to the CLl for the device?

1. A. Export the configuration using the Import/Export tool within Cisco FMC.
2. B. Create a backup of the configuration within the Cisco FMC.
3. C. Use the show run all command in the Cisco FTD CLI feature within Cisco FMC.
4. D. Download the configuration file within the File Download section of Cisco FMC.

Correct Answer: A