Free Cisco 300-710 SNCF Practice Questions 2026 Part2

Question #1

Which Cisco Firepower Threat Defense, which two interface settings are required when configuring a routed interface? (Choose two.)

A. Redundant Interface

B. EtherChannel

C. Speed

D. Media Type

E. Duplex

View answer

Correct Answer: CE

Question #2

An organization is implementing Cisco FTD using transparent mode in the network.Which rule in the default Access Control Policy ensures that this deployment does not create a loop in the network?

A. Multicast and broadcast packets are denied by default

B. STP BPDU packets are allowed by default

C. ARP inspection is enabled by default

D. ARP packets are allowed by default

View answer

Correct Answer: B

Question #3

A consultant is working on a project where the customer is upgrading from a single Cisco Firepower 2130 managed by FDM to a pair of Cisco Firepower 2130s managed by FMC for high availability. The customer wants the configuration of the existing device being managed by FDM to be carried over to FMC and then replicated to the additional device being added to create the high availability pair.Which action must the consultant take to meet this requirement?

A. The current FDM configuration must be configured by hand into FMC before the devices are registered

B. The current FDM configuration must be migrated to FMC using the Secure Firewall Migration Tool

C. The FTD configuration must be converted to ASA command format, which can then be migrated to FM

D. The current FDM configuration will be converted automatically into FMC when the device registers

View answer

Correct Answer: B

Question #4

Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)

A. The units must be the same version

B. Both devices can be part of a different group that must be in the same domain when configured within the FMC

C. The units must be different models if they are part of the same series

D. The units must be configured only for firewall routed mode

E. The units must be the same model

View answer

Correct Answer: AE

Question #5

An engineer is tasked with configuring a custom intrusion rule on Cisco Secure Firewall Management Center to detect and block the malicious traffic pattern with specific payload containing string "|04 68 72 80 87 ff ed cq fg he qm pn|".

A. reset

B. drop

C. alert

D. disable

E. quarantine

View answer

Correct Answer: B

Question #6

When a Cisco FTD device is configured in transparent firewall mode, on which two interface types can an IP address be configured? (Choose two.)

A. Physical

B. EtherChannel

C. Subinterface

D. BVI

E. Diagnostic

View answer

Correct Answer: DE

Question #7

What are the minimum requirements to deploy a managed device inline?

A. inline interfaces, security zones, MTU, and mode

B. passive interface, MTU, and mode

C. inline interfaces, MTU, and mode

D. passive interface, security zone, MTU, and mode

View answer

Correct Answer: C

Question #8

The event dashboard within the Cisco FMC has been inundated with low priority intrusion drop events, which are overshadowing high priority events. An engineer has been tasked with reviewing the policies and reducing the low priority events.Which action should be configured to accomplish this task?

A. drop packet

B. generate events

C. drop connection

D. drop and generate

View answer

Correct Answer: A

Question #9

What are the minimum requirements to deploy a managed device inline?

A. nline interfaces, security zones, MTU, and mode

B. assive interface, MTU, and mode

C. nline interfaces, MTU, and mode

D. assive interface, security zone, MTU, and mode

View answer

Correct Answer: C

Question #10

A mid-sized company is experiencing higher network bandwidth utilization due to a recent acquisition. The network operations team is asked to scale up their one Cisco FTD appliance deployment to higher capacities due to the increased network bandwidth.Which design option should be used to accomplish this goal?

A. Deploy multiple Cisco FTD HA pairs in clustering mode to increase performance

B. Deploy multiple Cisco FTD appliances in firewall clustering mode to increase performance

C. Deploy multiple Cisco FTD appliances using VPN load-balancing to scale performance

D. Deploy multiple Cisco FTD HA pairs to increase performance

View answer

Correct Answer: B

Question #11

What is an advantage of adding multiple inline interface pairs to the same inline interface set when deploying an asynchronous routing configuration?

A. Allows the IPS to identify inbound and outbound traffic as part of the same traffic flow

B. The interfaces disable autonegotiation and interface speed is hard coded set to 1000 Mbps

C. Allows traffic inspection to continue without interruption during the Snort process restart

D. The interfaces are automatically configured as a media-independent interface crossover

View answer

Correct Answer: A

Question #12

An engineer plans to reconfigure an existing Cisco FTD from transparent mode to routed mode.Which additional action must be taken to maintain communication between the two network segments?

A. Assign a unique VLAN ID for the interface in each segment

B. Update the IP addressing so that each segment is a unique IP subnet

C. Configure a NAT rule so that traffic between the segments is exempt from NAT

D. Deploy inbound ACLs on each interface to allow traffic between the segments

View answer

Correct Answer: B

Question #13

An engineer is tasked with deploying an internal perimeter firewall that will support multiple DMZs. Each DMZ has a unique private IP subnet range. How is this requirement satisfied?

A. Deploy the firewall in transparent mode with access control policies

B. Deploy the firewall in routed mode with access control policies

C. Deploy the firewall in routed mode with NAT configured

D. Deploy the firewall in transparent mode with NAT configured

View answer

Correct Answer: B

Question #14

A network engineer is planning on deploying a Cisco Secure Firewall Threat Defense Virtual appliance in transparent mode.

A. OSI

B. AWS

C. GCP

D. KVM

E. ESXi

View answer

Correct Answer: DE

Question #15

Which policy rule is included in the deployment of a local DMZ during the initial deployment of a Cisco NGFWthrough the Cisco FMC GUI?

A. a default DMZ policy for which only a user can change the IP addresses

B. deny ip any

C. no policy rule is included

D. permit ip any

View answer

Correct Answer: C

Question #16

A company is deploying a Cisco Secure IPS device configured in inline mode with a single Interface set that contains four interface pairs.Which two configurations must be implemented to allow the IPS device to uniquely identify packet flows and prevent the reporting of duplicate traffic and false positives? (Choose two.)

A. Set the source SPAN ports to tx only on the switches connected to the IPS interfaces

B. Modify the security zones used by the Cisco Secure IPS device

C. Change the MTU for the inline set to at least 1518

D. Reconfigure access rules to drop all but the first occurrence of the packet

E. Reassign the interface pairs to separate inline sets

View answer

Correct Answer: BE

Question #17

An organization has a Cisco FTD that uses bridge groups to pass traffic from the inside interfaces to the outside interfaces. They are unable to gather information about neighboring Cisco devices or use multicast in their environment. What must be done to resolve this issue?

A. reate a firewall rule to allow CDP traffic

B. reate a bridge group with the firewall interfaces

C. hange the firewall mode to transparent

D. hange the firewall mode to routed

View answer

Correct Answer: C

Question #18

An engineer must configure high availability for the Cisco Firepower devices. The current network topology does not allow for two devices to pass traffic concurrently. How must the devices be implemented in this environment?

A. n active/active mode

B. n a cluster span EtherChannel

C. n active/passive mode

D. n cluster interface mode

View answer

Correct Answer: C

Question #19

A network administrator is deploying a Cisco IPS appliance and needs it to operate initially without affecting traffic flows. It must also collect data to provide a baseline of unwanted traffic before being reconfigured to drop it.Which Cisco IPS mode meets these requirements?

A. failsafe

B. inline tap

C. promiscuous

D. bypass

View answer

Correct Answer: B

Question #20

A network administrator is setting up a new highly available Cisco Secure Firewall Threat Defense (FTD) pair. The administrator wants to monitor that the interfaces on the secondary Secure FTD are reachable not just up.What must the administrator configure?

A. This happens by default when high availability is enabled

B. secondary IP address

C. EUI 64 address on a high-availability link

D. separate high-availability and failover links

View answer

Correct Answer: B

Question #21

Which firewall design will allow it to forward traffic at layers 2 and 3 for the same subnet?

A. routed mode

B. Cisco Firepower Threat Defense mode

C. transparent mode

D. integrated routing and bridging

View answer

Correct Answer: D

Question #22

A network administrator is setting up a new highly available Cisco Secure Firewall Threat Defense (FTD) pair. The administrator wants to monitor that the interfaces on the secondary Secure FTD are reachable not just up.What must the administrator configure?

A. This happens by default when high availability is enabled

B. secondary IP address

C. EUI 64 address on a high-availability link

D. separate high-availability and failover links

View answer

Correct Answer: B

Question #23

A network engineer is planning on deploying a Cisco Secure Firewall Threat Defense Virtual appliance in transparent mode.Which two virtual environments support this configuration? (Choose two.)

A. OSI

B. AWS

C. GCP

D. KVM

E. ESXi

View answer

Correct Answer: DE

Question #24

An engineer wants to change an existing transparent Cisco FTD to routed mode. The device controls traffic between two network segments.Which action is mandatory to allow hosts to reestablish communication between these two segments after the change?

A. Remove the existing dynamic routing protocol settings

B. Configure multiple BVIs to route between segments

C. Assign unique VLAN IDs to each firewall interface

D. Implement non-overlapping IP subnets on each segment

View answer

Correct Answer: D

Question #25

What is the difference between inline and inline tap on Cisco Firepower?

A. Inline tap mode can send a copy of the traffic to another device

B. Inline tap mode does full packet capture

C. Inline mode cannot do SSL decryption

D. Inline mode can drop malicious traffic

View answer

Correct Answer: D

Question #26

An organization has a compliance requirement to protect servers from clients, however, the clients and servers all reside on the same Layer 3 network. Without readdressing IP subnets for clients or servers, how is segmentation achieved?

A. Change the IP addresses of the servers, while remaining on the same subnet

B. Deploy a firewall in routed mode between the clients and servers

C. Change the IP addresses of the clients, while remaining on the same subnet

D. Deploy a firewall in transparent mode between the clients and servers

View answer

Correct Answer: D

Question #27

Which two deployment types support high availability? (Choose two.)

A. transparent

B. routed

C. clustered

D. intra-chassis multi-instance

E. virtual appliance in public cloud

View answer

Correct Answer: AB

Question #28

An engineer is configuring a Cisco FTD device to place on the Finance VLAN to provide additional protection for company financial data. The device must be deployed without requiring any changes on the end user workstations, which currently use DHCP to obtain an IP address. How must the engineer deploy the device to meet this requirement?

A. Deploy the device in transparent mode and enable the DHCP Server feature

B. Deploy the device in routed mode and enable the DHCP Relay feature

C. Deploy the device in transparent mode and allow DHCP traffic in the access control policies

D. Deploy the device in routed mode and allow DHCP traffic in the access control policies

View answer

Correct Answer: C

Question #29

An engineer must deploy a Cisco FTD device. Management wants to examine traffic without requiring network changes that will disrupt end users. Corporate security policy requires the separation of management traffic from data traffic and the use of SSH over Telnet for remote administration. How must the device be deployed to meet these requirements?

A. in routed mode with a diagnostic interface

B. in transparent mode with a management Interface

C. in transparent made with a data interface

D. in routed mode with a bridge virtual interface

E. Reveal Answer

View answer

Correct Answer: B

Question #30

What is a result of enabling Cisco FTD clustering?

A. For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections

B. Integrated Routing and Bridging is supported on the master unit

C. Site-to-site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails

D. All Firepower appliances support Cisco FTD clustering

View answer

Correct Answer: C

Question #31

A network administrator cannot select the link to be used for failover when configuring an active/passive Cisco Secure Firewall Threat Defense High Availability pair.Which configuration must be changed before setting up the HA pair?

A. An IP address in the same subnet must be added to each device on the interface

B. The interface name must be removed from the interface on each device

C. The name Failover must be configured manually on the interface on each device

D. The interface must be configured as part of a LACP Active/Active EtherChannel

View answer

Correct Answer: B

Question #32

An administrator configures the interfaces of a Cisco Secure Firewall Threat Defense device in an inline IPS deployment. The administrator completes these actions:· identifies the device and the interfaces· sets the interface mode to inline· enables the interfacesWhich configuration step must the administrator take next to complete the implementation?

A. Set the interface to routed mode

B. Enable spanning-tree PortFast on the interfaces

C. Configure an inline set

D. Set the interface to transparent mode

View answer

Correct Answer: C

Question #33

When deploying a Cisco ASA Firepower module, an organization wants to evaluate the contents of the traffic without affecting the network. It is currently configured to have more than one instance of the same device on the physical appliance.Which deployment mode meets the needs of the organization?

A. inline tap monitor-only mode

B. passive monitor-only mode

C. passive tap monitor-only mode

D. inline mode

View answer

Correct Answer: A

Question #34

A company is deploying Cisco Secure Firewall Threat Defense with IPS.What must be implemented in inline mode to pass the traffic without inspection during spikes and ensure that network traffic is kept?

A. Change the interface mode to Routed

B. Select Propagate Link State

C. Increase the MTU to 9000

D. Set the Snort Failsafe option

View answer

Correct Answer: D

Question #35

Within an organization's high availability environment where both firewalls are passing traffic, traffic must be segmented based on which department it is destined for. Each department is situated on a different LAN.What must be configured to meet these requirements?

A. redundant interfaces

B. span EtherChannel clustering

C. high availability active/standby firewalls

D. multi-instance firewalls

View answer

Correct Answer: D

Question #36

A Cisco FTD has two physical interfaces assigned to a BVI. Each interface is connected to a different VLAN on the same switch.Which firewall mode is the Cisco FTD set up to support?

A. high availability clustering

B. active/active failover

C. transparent

D. routed

View answer

Correct Answer: D

Question #37

An engineer must deploy a Cisco FTD appliance via Cisco FMC to span a network segment to detect malware and threats. When setting the Cisco FTD interface mode, which sequence of actions meets this requirement?

A. ASet to passive, and configure an access control policy with an intrusion policy and a file policy defined

B. BSet to passive, and configure an access control policy with a prefilter policy defined

C. CSet to none, and configure an access control policy with a prefilter policy defined

D. DSet to none, and configure an access control policy with an intrusion policy and a file policy defined

View answer

Correct Answer: A

Question #38

An organization is configuring a new Cisco Secure Firewall ASA High Availability deployment.Which action must be taken to ensure that failover is as seamless as possible to end users?

A. Set the same FQDN for both chassis

B. Set up a virtual failover MAC address between chassis

C. Load the same software version on both chassis

D. Use a dedicated stateful link between chassis

View answer

Correct Answer: D

Question #39

An engineer must configure the firewall to monitor traffic within a single subnet without increasing the hop count of that traffic. How would the engineer achieve this?

A. et up Cisco Firepower as managed by Cisco FDM

B. et up Cisco Firepower in intrusion prevention mode

C. onfigure Cisco Firepower as a transparent firewall

D. onfigure Cisco Firepower in FXOS monitor only mode

View answer

Correct Answer: C

Question #40

Which command is run on an FTD unit to associate the unit to an FMC manager that is at IP address 10.0.0.10, and that has the registration key Cisco123?

A. onfigure manager local 10

B. onfigure manager add Cisco123 10

C. onfigure manager local Cisco123 10

D. onfigure manager add 10

View answer

Correct Answer: D

Question #41

A company is deploying a Cisco Secure IPS device configured in inline mode with a single Interface set that contains four interface pairs.Which two configurations must be implemented to allow the IPS device to uniquely identify packet flows and prevent the reporting of duplicate traffic and false positives? (Choose two.)

A. Set the source SPAN ports to tx only on the switches connected to the IPS interfaces

B. Modify the security zones used by the Cisco Secure IPS device

C. Change the MTU for the inline set to at least 1518

D. Reconfigure access rules to drop all but the first occurrence of the packet

E. Reassign the interface pairs to separate inline sets

View answer

Correct Answer: BE

Question #42

A company is deploying a Cisco Secure IPS device configured in inline mode with a single Interface set that contains four interface pairs.Which two configurations must be implemented to allow the IPS device to uniquely identify packet flows and prevent the reporting of duplicate traffic and false positives? (Choose two.)

A. Set the source SPAN ports to tx only on the switches connected to the IPS interfaces

B. Modify the security zones used by the Cisco Secure IPS device

C. Change the MTU for the inline set to at least 1518

D. Reconfigure access rules to drop all but the first occurrence of the packet

E. Reassign the interface pairs to separate inline sets

View answer

Correct Answer: BE

Question #43

A hospital network needs to upgrade their Cisco FMC managed devices and needs to ensure that a disaster recovery process is in place.What must be done in order to minimize downtime on the network?

A. Configure a second circuit to an ISP for added redundancy

B. Keep a copy of the current configuration to use as backup

C. Configure the Cisco FMCs for failover

D. Configure the Cisco FMC managed devices for clustering

View answer

Correct Answer: D

Question #44

With Cisco FTD software, which interface mode must be configured to passively receive traffic that passes through the appliance?

A. inline set

B. passive

C. routed

D. inline tap

View answer

Correct Answer: D

Question #45

On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?

A. transparent inline mode

B. TAP mode

C. strict TCP enforcement

D. propagate link state

View answer

Correct Answer: B

Question #46

An administrator is configuring their transparent Cisco FTD device to receive ERSPAN traffic from multiple switches on a passive port, but the Cisco FTD is not processing the traffic.What is the problem?

A. The switches do not have Layer 3 connectivity to the FTD device for GRE traffic transmission

B. The switches were not set up with a monitor session ID that matches the flow ID defined on the Cisco FTD

C. The Cisco FTD must be in routed mode to process ERSPAN traffic

D. The Cisco FTD must be configured with an ERSPAN port not a passive port

View answer

Correct Answer: C

Question #47

While configuring FTD, a network engineer wants to ensure that traffic passing though the appliance does not require routing or VLAN rewriting.

A. inline set

B. passive

C. transparent

D. inline tap

View answer

Correct Answer: A

Question #48

What is the advantage of having Cisco Firepower devices send events to Cisco Threat response via the security services exchange portal directly as opposed to using syslog?

A. Firepower devices do not need to be connected to the internet

B. All types of Firepower devices are supported

C. Supports all devices that are running supported versions of Firepower

D. An on-premises proxy server does not need to set up and maintained

View answer

Correct Answer: D

Question #49

Which two conditions must be met to enable high availability between two Cisco FTD devices? (Choose two.)

A. ame flash memory size

B. ame NTP configuration

C. ame DHCP/PPoE configuration

D. ame host name

E. ame number of interfaces

View answer

Correct Answer: BE

Question #50

What is the purpose of the IRB feature in next-generation firewall?

A. o enable transparent bridging between two Layer 2 interfaces

B. o configure NAT in transparent mode

C. o block routing between two Layer 3 interfaces

D. o allow multiple physical interfaces to be part of the same VLAN

View answer

Correct Answer: A

Question #51

Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)

A. The units must be the same version

B. Both devices can be part of a different group that must be in the same domain when configured within the FMC

C. The units must be different models if they are part of the same series

D. The units must be configured only for firewall routed mode

E. The units must be the same model

View answer

Correct Answer: AE

Question #52

The administrator notices that there is malware present with an .exe extension and needs to verify if any of the systems on the network are running the executable file. What must be configured within Cisco AMP for Endpoints to show this data?

A. prevalence

B. threat root cause

C. vulnerable software

D. file analysis

E. Reveal Answer

View answer

Correct Answer: A

Question #53

Which two dynamic routing protocols are supported in Cisco FTD without using FlexConfig? (Choose two.)

A. EIGRP

B. OSPF

C. static routing

D. IS-IS

E. BGP

View answer

Correct Answer: BE

Question #54

In a multi-tenant deployment where multiple domains are in use, which update should be applied outside of the Global Domain?

A. minor upgrade

B. local import of intrusion rules

C. Cisco Geolocation Database

D. local import of major upgrade

View answer

Correct Answer: B

Question #55

A network administrator is implementing an active/passive high availability Cisco FTD pair.When adding the high availability pair, the administrator cannot select the secondary peer.What is the cause?

A. The second Cisco FTD is not the same model as the primary Cisco FTD

B. An high availability license must be added to the Cisco FMC before adding the high availability pair

C. The failover link must be defined on each Cisco FTD before adding the high availability pair

D. Both Cisco FTD devices are not at the same software version

View answer

Correct Answer: A

Question #56

A network administrator is deploying a new Cisco Secure Firewall Threat Defense (FTD) firewall After Cisco Secure FTD is deployed, inside clients nave intermittent connectivity to each other. When … the packet capture on the Secure FTD firewall, the administrator sees that Secure FID is responding to all the AW requests on the inside network. Which action must the network administrator e to resolve the issue''

A. Review NAT policy and disable incorrect proxy ARP configuration

B. Hardcode the MAC address of the FTD to IP mapping on client machines

C. Review the access policy and verify that ARP is allowed from inside to inside

D. Convert the FTD to transparent mode to allow ARP requests

E. Reveal Answer

View answer

Correct Answer: A

Question #57

A network security engineer must replace a faulty Cisco FTD device in a high availability pair.Which action must be taken while replacing the faulty unit?

A. Ensure that the faulty Cisco FTD device remains registered to the Cisco FMC

B. Shut down the active Cisco FTD device before powering up the replacement unit

C. Shut down the Cisco FMC before powering up the replacement unit

D. Unregister the faulty Cisco FTD device from the Cisco FMC

View answer

Correct Answer: D

Question #58

An organization has implemented Cisco Firepower without IPS capabilities and now wants to enable inspection for their traffic. They need to be able to detect protocol anomalies and utilize the Snort rule sets to detect malicious behavior. How is this accomplished?

A. odify the network discovery policy to detect new hosts to inspect

B. odify the access control policy to redirect interesting traffic to the engine

C. odify the intrusion policy to determine the minimum severity of an event to inspect

D. odify the network analysis policy to process the packets for inspection

View answer

Correct Answer: B

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now

Free Cisco 300-710 SNCF Practice Questions 2026 Part2

View The Updated 300-710 Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE Get Now

Free Cisco 300-710 SNCF Practice Questions 2026 Part2

View The Updated 300-710 Exam Questions

View Answers after Submission

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now