300-710 Free Practice Test

- (Exam Topic 3)
Which CLI command is used to control special handling of ClientHello messages?

1. A. system support ssl-client-hello-tuning
2. B. system support ssl-client-hello-display
3. C. system support ssl-client-hello-force-reset
4. D. system support ssl-client-hello-enabled

Correct Answer: A

- (Exam Topic 5)
A hospital network needs to upgrade their Cisco FMC managed devices and needs to ensure that a disaster recovery process is in place. What must be done in order to minimize downtime on the network?

1. A. Configure a second circuit to an ISP for added redundancy
2. B. Keep a copy of the current configuration to use as backup
3. C. Configure the Cisco FMCs for failover
4. D. Configure the Cisco FMC managed devices for clustering.

Correct Answer: B

- (Exam Topic 1)
Which two dynamic routing protocols are supported in Firepower Threat Defense without using FlexConfig? (Choose two.)

1. A. EIGRP
2. B. OSPF
3. C. static routing
4. D. IS-IS
5. E. BGP

Correct Answer: BE
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/660/fdm/fptd-fdm-config-guide-660/fptd- fdm-routing.html

- (Exam Topic 2)
In which two places can thresholding settings be configured? (Choose two.)

1. A. on each IPS rule
2. B. globally, within the network analysis policy
3. C. globally, per intrusion policy
4. D. on each access control rule
5. E. per preprocessor, within the network analysis policy

Correct Answer: AC
Reference: https://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa- firepower-module-user-guide-v541/Intrusion-Global-Threshold.pdf

- (Exam Topic 5)
An engineer defines a new rule while configuring an Access Control Policy. After deploying the policy, the rule is not working as expected and the hit counters associated with the rule are showing zero. What is causing this error?

1. A. Logging is not enabled for the rule.
2. B. The rule was not enabled after being created.
3. C. The wrong source interface for Snort was selected in the rule.
4. D. An incorrect application signature was used in the rule.

Correct Answer: B