Question 1

An analyst is investigating a potentially compromised endpoint within the network and pulls a host report for the endpoint in question to collect metrics and documentation. What information should be taken from this report for the investigation?

Options :

A : client applications by user, web applications, and user connections

B : number of attacked machines, sources of the attack, and traffic patterns

C : intrusion events, host connections, and user sessions

D : threat detections over time and application protocols transferring malware

Answer: C

Question 2

What is a characteristic of bridge groups on a Cisco FTD?

Options :

A : In routed firewall mode, routing between bridge groups must pass through a routed interface.

B : In routed firewall mode, routing between bridge groups is supported.

C : In transparent firewall mode, routing between bridge groups is supported

D : Routing between bridge groups is achieved only with a router-on-a-stick configuration on a connected router

Answer: B

Question 3

Refer to the exhibit.

A Cisco Secure Firewall Threat Defense (FTD) device is deployed in inline mode with an inline set. The network engineer wants router R2 to remove the directly connected route M 68.1.0/24 from its routing table when the cable between routed R1 and the Secure FTD device Is disconnected. Which action must the engineer take?

Options :

A : Implement the Propagate Link Stale option on the Secure FTD device

B : Establish a routing protocol between R1 and R2.

C : Disable hardware bypass on the Secure FTD device.

D : Implement autostate functionality on the Gi0/2 interface of R2

Answer: A

Question 4

An administrator is setting up Cisco Firepower to send data to the Cisco Stealthwatch appliances. The NetFlow_Set_Parameters object is already created, but NetFlow is not being sent to the flow collector. What must be done to prevent this from occurring?

Options :

A : Add the NetFlow_Send_Destination object to the configuration

B : Create a Security Intelligence object to send the data to Cisco Stealthwatch

C : Create a service identifier to enable the NetFlow service

D : Add the NetFlow_Add_Destination object to the configuration

Answer: D

Question 5

When a Cisco FTD device is configured in transparent firewall mode, on which two interface types can an IP address be configured? (Choose two.)

Options :

A : Diagnostic

B : EtherChannel

C : BVI

D : Physical

E : Subinterface

Answer: A,C

Confidently Practice Online with Free 300-710 Exam Cram

Buying Options: