Free Cisco 300-710 SNCF Practice Questions 2026 Part1

Question #1

An organization has implemented Cisco Firepower without IPS capabilities and now wants to enable inspection for their traffic.They need to be able to detect protocol anomalies and utilize the Snort rule sets to detect malicious behavior. How is this accomplished?

A. odify the network discovery policy to detect new hosts to inspect

B. odify the network analysis policy to process the packets for inspection

C. odify the intrusion policy to determine the minimum severity of an event to inspect

D. odify the access control policy to redirect interesting traffic to the engine

View answer

Correct Answer: D

Question #2

On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?

A. transparent inline mode

B. TAP mode

C. strict TCP enforcement

D. propagate link state

View answer

Correct Answer: B

Question #3

A security engineer must configure a Cisco FTD appliance to inspect traffic coming from the internet. The Internet traffic will be mirrored from the Cisco Catalyst 9300 Switch.

A. Set interface configuration mode to none

B. Set the firewall mode to transparent

C. Set the firewall mode to routed

D. Set interface configuration mode to passive

View answer

Correct Answer: D

Question #4

Which protocol establishes network redundancy in a switched Firepower device deployment?

A. STP

B. HSRP

C. GLBP

D. VRRP

View answer

Correct Answer: A

Question #5

While integrating Cisco Umbrella with Cisco Threat Response, a network security engineer wants to automatically push blocking of domains from the Cisco Threat Response interface to Cisco Umbrella. Which API meets this requirement?

A. Ainvestigate

B. Breporting

C. Cenforcement

D. DREST

View answer

Correct Answer: D

Question #6

An engineer must configure high availability for the Cisco Firepower devices. The current networktopology does not allow for two devices to pass traffic concurrently. How must the devices beimplemented in this environment?

A. n active/active mode

B. n a cluster span EtherChannel

C. n active/passive mode

D. n cluster interface mode

View answer

Correct Answer: C

Question #7

Encrypted Visibility Engine (EVE) is enabled under which lab on an access control policy in Cisco Secure Firewall Management Centre?

A. Network Analysis Policy

B. Advanced

C. Security Intelligence

D. SSL

View answer

Correct Answer: B

Question #8

An engineer is configuring a Cisco IPS to protect the network and wants to test a policy before deploying it. A copy of each incoming packet needs to be monitored while traffic flow remains constant. Which IPS mode should be implemented to meet these requirements?

A. Inline tap

B. passive

C. transparent

D. routed

E. Reveal Answer

View answer

Correct Answer: A

Question #9

An engineer is building a new access control policy using Cisco FMC. The policy must inspect a unique IPS policy as well as log rule matching. Which action must be taken to meet these requirements?

A. onfigure an IPS policy and enable per-rule logging

B. isable the default IPS policy and enable global logging

C. onfigure an IPS policy and enable global logging

D. isable the default IPS policy and enable per-rule logging

View answer

Correct Answer: A

Question #10

On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?

A. ransparent inline mode

B. AP mode

C. trict TCP enforcement

D. ropagate link state

View answer

Correct Answer: B

Question #11

An administrator is optimizing the Cisco FTD rules to improve network performance, and wants to bypass inspection for certain traffic types to reduce the load on the Cisco FTD. Which policy must be configured to accomplish this goal?

A. intrusion

B. prefilter

C. URL filtering

D. identity

View answer

Correct Answer: B

Question #12

An engineer is configuring Cisco Secure Firewall Threat Defense managed by a Secure Firewall Management Center appliance. The company wants remote access VPN users to be reachable from the inside network. What must the engineer configure to meet the requirements?

A. anual NAT exemption rule at the bottom of the NAT policy

B. uto NAT exemption rule at the bottom of the NAT policy

C. anual NAT exemption rule at the top of the NAT policy

D. uto NAT exemption rule at the top of the NAT policy

View answer

Correct Answer: C

Question #13

What are the minimum requirements to deploy a managed device inline?

A. inline interfaces, security zones, MTU, and mode

B. passive interface, MTU, and mode

C. inline interfaces, MTU, and mode

D. passive interface, security zone, MTU, and mode

View answer

Correct Answer: C

Question #14

An engineer is implementing a new Cisco Secure Firewall. The firewall must filter traffic between the three subnets:· LAN 192.168.101.0/24· DMZ 192.168.200.0/24· WAN 10.0.0.0/30Which firewall mode must the engineer implement?

A. network

B. routed

C. gateway

D. transparent

View answer

Correct Answer: B

Question #15

An engineer needs to configure remote storage on Cisco FMC. Configuration backups must be available from a secure location on the network for disaster recovery. Reports need to back up to a shared location that auditors can access with their Active Directory logins. Which strategy must the engineer use to meet these objectives?

A. AUse SMB for backups and NFS for reports

B. BUse NFS for both backups and reports

C. CUse SMB for both backups and reports

D. DUse SSH for backups and NFS for reports

View answer

Correct Answer: C

Question #16

An engineer is implementing Cisco FTD in the network and is determining which Firepower mode to use. The organization needs to have multiple virtual Firepower devices working separately inside of the FTD appliance to provide traffic segmentation.Which deployment mode should be configured in the Cisco Firepower Management Console to support these requirements?

A. multi-instance

B. multiple deployment

C. single deployment

D. single-context

View answer

Correct Answer: A

Question #17

A Cisco Secure Firewall Threat Defense device is configured in inline IPS mode to inspect all traffic that passes through the interfaces in the inline set.Which setting in the inline set configuration must be selected to allow traffic to pass through uninterrupted when VDB updates are being applied?

A. Tap Mode

B. Strict TCP Enforcement

C. Propagate Link State

D. Snort Fail Open

View answer

Correct Answer: D

Question #18

An engineer is troubleshooting an intermittent connectivity issue on a Cisco Secure Firewall Threat Defense appliance and must collect 24 hours worth of data. The engineer started a packet capture, however it stops prematurely during this time period. The engineer notices that the packet capture buffer size is set to the default of 32 MB. Which buffer size is the maximum that the engineer must set to enable the packet capture to run successfully?

A. 64 MB

B. 1 GB

C. 10 GB

D. 100 GB

View answer

Correct Answer: C

Question #19

A network engineer is planning on deploying a Cisco Secure Firewall Threat Defense Virtual appliance in transparent mode.Which two virtual environments support this configuration? (Choose two.)

A. OSI

B. AWS

C. GCP

D. KVM

E. ESXi

View answer

Correct Answer: DE

Question #20

Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)

A. The units must be the same version

B. Both devices can be part of a different group that must be in the same domain when configured within the FMC

C. The units must be different models if they are part of the same series

D. The units must be configured only for firewall routed mode

E. The units must be the same model

View answer

Correct Answer: AE

Question #21

An engineer defines a new rule while configuring an Access Control Policy. After deploying the policy, the rule is not working as expected and the hit counters associated with the rule are showing zero. What is causing this error?

A. Logging is not enabled for the rule

B. The rule was not enabled after being created

C. The wrong source interface for Snort was selected in the rule

D. An incorrect application signature was used in the rule

View answer

Correct Answer: B

Question #22

Which Cisco Firepower Threat Defense, which two interface settings are required when configuring a routed interface? (Choose two.)

A. Redundant Interface

B. EtherChannel

C. Speed

D. Media Type

E. Duplex

View answer

Correct Answer: CE

Question #23

An engineer must configure the firewall to monitor traffic within a single subnet without increasing the hop count of that traffic. How would the engineer achieve this?

A. Configure Cisco Firepower as a transparent firewall

B. Set up Cisco Firepower as managed by Cisco FDM

C. Configure Cisco Firepower in FXOS monitor only mode

D. Set up Cisco Firepower in intrusion prevention mode

View answer

Correct Answer: A

Question #24

Which protocol establishes network redundancy in a switched Firepower device deployment?

A. STP

B. HSRP

C. GLBP

D. VRRP

View answer

Correct Answer: A

Question #25

What are two application layer preprocessors? (Choose two.)

A. CIFS

B. IMAP

C. SSL

D. DNP3

E. ICMP

View answer

Correct Answer: BC

Question #26

Which two deployment types support high availability? (Choose two.)

A. transparent

B. routed

C. clustered

D. intra-chassis multi-instance

E. virtual appliance in public cloud

View answer

Correct Answer: AB

Question #27

An engineer is implementing a new Cisco Secure Firewall. The firewall must filter traffic between the three subnets:· LAN 192.168.101.0/24· DMZ 192.168.200.0/24· WAN 10.0.0.0/30Which firewall mode must the engineer implement?

A. network

B. routed

C. gateway

D. transparent

View answer

Correct Answer: B

Question #28

With Cisco FTD integrated routing and bridging, which interface does the bridge group use to communicate with a routed interface?

A. subinterface

B. switch virtual

C. bridge virtual

D. bridge group member

View answer

Correct Answer: C

Question #29

What is a result of enabling Cisco FTD clustering?

A. For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections

B. Integrated Routing and Bridging is supported on the master unit

C. Site - to - site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails

D. All Firepower appliances can support Cisco FTD clustering

View answer

Correct Answer: C

Question #30

An organization is configuring a new Cisco Firepower High Availability deployment. Which actionmust be taken to ensure that failover is as seamless as possible to end users?

A. Set up a virtual failover MAC address between chassis

B. Use a dedicated stateful link between chassis

C. Load the same software version on both chassis

D. Set the same FQDN for both chassis

View answer

Correct Answer: B

Question #31

When deploying a Cisco ASA Firepower module, an organization wants to evaluate the contents ofthe traffic without affecting the network. It is currently configured to have more than one instance ofthe same device on the physical appliance Which deployment mode meets the needs of theorganization?

A. nline tap monitor-only mode

B. assive monitor-only mode

C. assive tap monitor-only mode

D. nline mode

View answer

Correct Answer: A

Question #32

An engineer is building a new access control policy using Cisco FMC. The policy must inspect a unique IPS policy as well as log rule matching.Which action must be taken to meet these requirements?

A. Configure an IPS policy and enable per-rule logging

B. Disable the default IPS policy and enable global logging

C. Configure an IPS policy and enable global logging

D. Disable the default IPS policy and enable per-rule logging

View answer

Correct Answer: A

Question #33

When deploying a Cisco ASA Firepower module, an organization wants to evaluate the contents of the traffic without affecting the network. It is currently configured to have more than one instance of the same device on the physical appliance. Which deployment mode meets the needs of the organization?

A. nline tap monitor-only mode

B. assive monitor-only mode

C. assive tap monitor-only mode

D. nline mode

View answer

Correct Answer: A

Question #34

With Cisco FTD software, which interface mode must be configured to passively receive traffic that passes through the appliance?

A. ERSPAN

B. firewall

C. tap

D. IPS-only

View answer

Correct Answer: C

Question #35

A security engineer must configure policies tor a recently deployed Cisco FTD. The security policy for the company dictates that when five or more connections from external sources are initiated within 2 minutes, there is cause for concern. Which type of policy must be configured in Cisco FMC \zgenerate an alert when this condition is triggered?

A. application detector

B. access control

C. intrusion

D. correlation

E. Reveal Answer

View answer

Correct Answer: D

Question #36

What is the disadvantage of setting up a site-to-site VPN in a clustered-units environment?

A. PN connections can be re-established only if the failed master unit recovers

B. mart License is required to maintain VPN connections simultaneously across all cluster units

C. PN connections must be re-established when a new master unit is elected

D. nly established VPN connections are maintained when a new master unit is elected

View answer

Correct Answer: C

Question #37

Which two statements are valid regarding the licensing model used on Cisco Secure Firewall Threat Defense Virtual appliances? (Choose two.)

A. All licenses support a maximum of 250 VPN peers

B. All licenses support up to 16 vCPUs

C. All licenses require 500G of available storage for the VM

D. Licenses can be used on both physical and virtual appliances

E. Licenses can be used on any supported cloud platform

View answer

Correct Answer: DE

Question #38

What is the difference between inline and inline tap on Cisco Firepower?

A. nline tap mode can send a copy of the traffic to another device

B. nline tap mode does full packet capture

C. nline mode cannot do SSL decryption

D. nline mode can drop malicious traffic

View answer

Correct Answer: D

Question #39

An engineer must configure high availability for the Cisco Firepower devices. The current network topology does not allow for two devices to pass traffic concurrently. How must the devices be implemented in this environment?

A. in active/active mode

B. in a cluster span EtherChannel

C. in active/passive mode

D. in cluster interface mode

View answer

Correct Answer: C

Question #40

A network administrator wants to block traffic to a known malware site at https://www.badsite.com and all subdomains while ensuring no packets from any internal client are sent to that site.Which type of policy must the network administrator use to accomplish this goal?

A. refilter policy

B. ccess Control policy with URL filtering

C. NS policy

D. SL policy

View answer

Correct Answer: C

Question #41

An administrator configures the interfaces of a Cisco Secure Firewall Threat Defense device in an inline IPS deployment. The administrator completes these actions:· identifies the device and the interfaces· sets the interface mode to inline· enables the interfacesWhich configuration step must the administrator take next to complete the implementation?

A. Set the interface to routed mode

B. Enable spanning-tree PortFast on the interfaces

C. Configure an inline set

D. Set the interface to transparent mode

View answer

Correct Answer: C

Question #42

An engineer must change the mode of a Cisco Secure Firewall Threat Defense (FTD) firewall in the Cisco Secure Firewall Management Center (FMC) inventory. The engineer must take these actions:Register Secure FTD with Secure FMC.Change the firewall mode.Deregister the Secure FTD device from Secure FMC. How must the engineer take FTD take the actions?

A. Reload the Secure FTD device

B. Configure the management IP address

C. Access the Secure FTD CLI from the console port

D. Erase the Secure FTD configuration

E. Reveal Answer

View answer

Correct Answer: C

Question #43

Which function is the primary function of Cisco AMP threat Grid?

A. utomated malware analysis

B. utomated email encryption

C. pplying a real-time URI blacklist

D. onitoring network traffic

View answer

Correct Answer: A

Question #44

A hospital network needs to upgrade their Cisco FMC managed devices and needs to ensure that a disaster recovery process is in place. What must be done in order to minimize downtime on the network?

A. onfigure a second circuit to an ISP for added redundancy

B. eep a copy of the current configuration to use as backup

C. onfigure the Cisco FMCs for failover

D. onfigure the Cisco FMC managed devices for clustering

View answer

Correct Answer: D

Question #45

Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)

A. he units must be the same version

B. oth devices can be part of a different group that must be in the same domain when configured within the FMC

C. he units must be different models if they are part of the same series

D. he units must be configured only for firewall routed mode

E. he units must be the same model

View answer

Correct Answer: AE

Question #46

What are the minimum requirements to deploy a managed device inline?

A. inline interfaces, security zones, MTU, and mode

B. passive interface, MTU, and mode

C. inline interfaces, MTU, and mode

D. passive interface, security zone, MTU, and mode

View answer

Correct Answer: C

Question #47

A network engineer implements a new Cisco Firepower device on the network to take advantage ofits intrusion detection functionality. There is a requirement to analyze the traffic going across thedevice, alert on any malicious traffic, and appear as a bump in the wire How should this beimplemented?

A. pecify the BVl IP address as the default gateway for connected devices

B. nable routing on the Cisco Firepower

C. dd an IP address to the physical Cisco Firepower interfaces

D. onfigure a bridge group in transparent mode

View answer

Correct Answer: D

Question #48

Upon detecting a flagrant threat on an endpoint, which two technologies instruct Cisco Identity Services Engine to contain the infected endpoint either manually or automatically? (Choose two.)

A. ACisco ASA 5500 Series

B. BCisco FMC

C. CCisco AMP

D. DCisco Stealthwatch

E. ECisco ASR 7200 Series

View answer

Correct Answer: CD

Question #49

On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?

A. transparent inline mode

B. TAP mode

C. strict TCP enforcement

D. propagate link state

View answer

Correct Answer: D

Question #50

An organization has a Cisco FTD that uses bridge groups to pass traffic from the inside interfaces tothe outside interfaces. They are unable to gather information about neighbouring Cisco devices oruse multicast in their environment. What must be done to resolve this issue?

A. reate a firewall rule to allow CDP traffic

B. reate a bridge group with the firewall interfaces

C. hange the firewall mode to transparent

D. hange the firewall mode to routed

View answer

Correct Answer: C

Question #51

An engineer must deploy a Cisco Secure Firewall Threat Defense device. Management wants to examine traffic without requiring network changes that will disrupt end users. Corporate security policy requires the separation of management traffic from data traffic and the use of SSH over Telnet for remote administration. How must the device be deployed to meet these requirements?

A. in transparent mode with a management interface

B. in routed mode with a bridge virtual interface

C. in transparent mode with a data interface

D. in routed mode with a diagnostic interface

View answer

Correct Answer: A

Question #52

What is a characteristic of bridge groups on a Cisco FTD?

A. In routed firewall mode, routing between bridge groups is supported

B. Routing between bridge groups is achieved only with a router-on-a-stick configuration on a connected router

C. In routed firewall mode, routing between bridge groups must pass through a routed interface

D. In transparent firewall mode, routing between bridge groups is supported

View answer

Correct Answer: A

Question #53

Which two conditions must be met to enable high availability between two Cisco FTD devices?(Choose two.)

A. ame flash memory size

B. ame NTP configuration

C. ame DHCP/PPoE configuration

D. ame host name

E. ame number of interfaces

View answer

Correct Answer: BE

Question #54

When creating a report template, how can the results be limited to show only the activity of a specific subnet?

A. Create a custom search in Firepower Management Center and select it in each section of the report

B. Add an Input Parameter in the Advanced Settings of the report, and set the type to Network/IP

C. Add a Table View section to the report with the Search field defined as the network in CIDR format

D. Select IP Address as the X-Axis in each section of the report

View answer

Correct Answer: B

Question #55

A network administrator configured a NAT policy that translates a public IP address to an internal web server IP address. An access policy has also been created that allows any source to reach the public IP address on port 80. The web server is still not reachable from the Internet on port 80.

A. The intrusion policy must be disabled for port 80

B. The access policy rule must be configured for the action trust

C. The NAT policy must be modified to translate the source IP address as well as destination IP address

D. The access policy must allow traffic to the internal web server IP address

View answer

Correct Answer: D

Question #56

An engineer is configuring a second Cisco FMC as a standby device but is unable to register with the active unit.What is causing this issue?

A. The code versions running on the Cisco FMC devices are different

B. The licensing purchased does not include high availability

C. The primary FMC currently has devices connected to it

D. There is only 10 Mbps of bandwidth between the two devices

View answer

Correct Answer: A

Question #57

What is a result of enabling Cisco FTD clustering?

A. or the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections

B. ntegrated Routing and Bridging is supported on the master unit

C. ite-to-site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails

D. ll Firepower appliances support Cisco FTD clustering

View answer

Correct Answer: C

Question #58

An engineer is configuring a Cisco IPS to protect the network and wants to test a policy before deploying it. A copy of each incoming packet needs to be monitored while traffic flow remains constant.Which IPS mode should be implemented to meet these requirements?

A. routed

B. passive

C. transparent

D. inline tap

View answer

Correct Answer: D

Question #59

Which protocol establishes network redundancy in a switched Firepower device deployment?

A. TP

B. SRP

C. LBP

D. RRP

View answer

Correct Answer: A

Question #60

Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD? (Choose two.)

A. SPFv2 with IPv6 capabilities

B. irtual links

C. HA authentication to OSPF packets

D. rea boundary router type 1 LSA filtering

E. D5 authentication to OSPF packets

View answer

Correct Answer: BE

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now

Free Cisco 300-710 SNCF Practice Questions 2026 Part1

View The Updated 300-710 Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE Get Now

Free Cisco 300-710 SNCF Practice Questions 2026 Part1

View The Updated 300-710 Exam Questions

View Answers after Submission

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now