Free Cisco 300-710 Exam Dumps Questions & Answers

A security engineer is deploying a Cisco Secure Firewall Threat Defense device through Cisco Secure Firewall Management Center. The Threat license is installed, the Encrypted Visibility Engine is enabled in the access control policy Decryption policy is configured with the Decrypt - Resign action to inspect outbound TLS/SSL traffic. Users report that a banking applications repeatedly fails to load. The engineer confirms the endpoint performs certificate pinning to validate the server certificate. Engineer must allow the traffic to pass while all other outbound traffic continues to be inspected. The engineer created a rule that matches banking category and placed the rule above Decrypt - Resign policy. Which decryption rule action must be configured to meet the requirement?

• A.Decrypt - Known Key
• B.Do Not Decrypt
• C.Trust
• D.Block

A network administrator notices that remote access VPN users are not reachable from inside the network. It is determined that routing is configured correctly, however return traffic is entering the firewall but not leaving it What is the reason for this issue?

• A.An external NAT IP address is not configured.
• B.An external NAT IP address is configured to match the wrong interface.
• C.A manual NAT exemption rule does not exist at the top of the NAT table.
• D.An object NAT exemption rule does not exist at the top of the NAT table.

An engineer must configure a correlation policy in Cisco Secure Firewall Management Center to detect when an IP address from an internal network communicates with a known malicious host. Connections made by the internal IP addresses must be tracked, and an external dynamic list must be used for the condition. Which type of event must the engineer configure on the correlation policy?

• A.Malware
• B.Connection tracker
• C.Intrusion Impact Alert
• D.Network discovery

An engineer attempts to pull the configuration for a Cisco FTD sensor to review with Cisco TAC but does not have direct access to the CU for the device. The CLl for the device is managed by Cisco FMC to which the engineer has access. Which action in Cisco FMC grants access to the CLl for the device?

• A.Download the configuration file within the File Download section of Cisco FMC.
• B.Use the show run all command in the Cisco FTD CLI feature within Cisco FMC.
• C.Create a backup of the configuration within the Cisco FMC.
• D.Export the configuration using the Import/Export tool within Cisco FMC.

An analyst is investigating a potentially compromised endpoint within the network and pulls a host report for the endpoint in question to collect metrics and documentation. What information should be taken from this report for the investigation?

• A.number of attacked machines, sources of the attack, and traffic patterns
• B.intrusion events, host connections, and user sessions
• C.threat detections over time and application protocols transferring malware
• D.client applications by user, web applications, and user connections