Question 1

An organization is migrating their Cisco ASA devices running in multicontext mode to Cisco FTD devices. Which action must be taken to ensure that each context on the Cisco ASA is logically separated in the Cisco FTD devices?

Options :

A : Add a native instance to distribute traffic to each Cisco FTD context.

B : Add the Cisco FTD device to the Cisco ASA port channels.

C : Configure a container instance in the Cisco FTD for each context in the Cisco ASA.

D : Configure the Cisco FTD to use port channels spanning multiple networks.

Answer: C

Question 2

Which firewall design will allow It to forward traffic at layers 2 and 3 for the same subnet?

Options :

A : Cisco Firepower Threat Defense mode

B : routed mode

C : Integrated routing and bridging

D : transparent mode

Answer: D

Question 3

An engineer must configure an inline set on a Cisco Secure IPS by using the Cisco Secure Firewall

Management Center. The inline set must make a copy of each packet before analyzing the packet and block

any connections that do not complete the three-way handshake. These configurations have been performed

already:

Select and enable the interfaces that will be added to the inline set.

Configure the speed and duplex.

Configure the inline set and add the interfaces to the inline set.

Which action completes the task?

Options :

A : Set Tap Mode to Inline.

B : Configure Snort Fail Open.

C : Configure Link State Propagation.

D : Implement Strict TCP Enforcement.

Answer: D

Question 4

Refer to the exhibit.

A Cisco Secure Firewall Threat Defense (FTD) device is deployed in inline mode with an inline set. The network engineer wants router R2 to remove the directly connected route M 68.1.0/24 from its routing table when the cable between routed R1 and the Secure FTD device Is disconnected. Which action must the engineer take?

Options :

A : Implement the Propagate Link Stale option on the Secure FTD device

B : Establish a routing protocol between R1 and R2.

C : Disable hardware bypass on the Secure FTD device.

D : Implement autostate functionality on the Gi0/2 interface of R2

Answer: A

Question 5

When creating a report template, how can the results be limited to show only the activity of a specific subnet?

Options :

A : Create a custom search in Firepower Management Center and select it in each section of the report.

B : Add an Input Parameter in the Advanced Settings of the report, and set the type to Network/IP.

C : Add a Table View section to the report with the Search field defined as the network in CIDR format.

D : Select IP Address as the X-Axis in each section of the report.

Answer: B

Confidently Practice Online with Free 300-710 Exam Cram

Buying Options: