300-710 Free Practice Test

- (Exam Topic 5)
An engineer is creating an URL object on Cisco FMC How must it be configured so that the object will match for HTTPS traffic in an access control policy?

1. A. Specify the protocol to match (HTTP or HTTPS).
2. B. Use the FQDN including the subdomain for the website
3. C. Define the path to the individual webpage that uses HTTPS.
4. D. Use the subject common name from the website certificate

Correct Answer: B

- (Exam Topic 5)
What is the advantage of having Cisco Firepower devices send events to Cisco Threat Response via the security services exchange portal directly as opposed to using syslog?

1. A. All types of Cisco Firepower devices are supported.
2. B. An on-premises proxy server does not need to be set up and maintained.
3. C. Cisco Firepower devices do not need to be connected to the Internet.
4. D. Supports all devices that are running supported versions of Cisco Firepower.

Correct Answer: B

- (Exam Topic 1)
What are two application layer preprocessors? (Choose two.)

1. A. CIFS
2. B. IMAP
3. C. SSL
4. D. DNP3
5. E. ICMP

Correct Answer: BC
Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Applic

- (Exam Topic 5)
An engineer configures an access control rule that deploys file policy configurations to security zones or tunnel zones, and it causes the device to restart. What is the reason for the restart?

1. A. Source or destination security zones in the access control rule matches the security zones that are associated with interfaces on the target devices.
2. B. The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the destination policy.
3. C. Source or destination security zones in the source tunnel zone do not match the security zones that are associated with interfaces on the target devices.
4. D. The source tunnel zone in the rule does not match a tunnel zone that is assigned to a tunnel rule in the source policy.

Correct Answer: A

- (Exam Topic 5)
An organization is configuring a new Cisco Firepower High Availability deployment. Which action must be taken to ensure that failover is as seamless as possible to end users?

1. A. Set up a virtual failover MAC address between chassis.
2. B. Use a dedicated stateful link between chassis.
3. C. Load the same software version on both chassis.
4. D. Set the same FQDN for both chassis.

Correct Answer: B