Online Access Free 300-710 Practice Test

The administrator notices that there is malware present with an .exe extension and needs to verify if any of the systems on the network are running the executable file. What must be configured within Cisco AMP for Endpoints to show this data?

• A.threat root cause
• B.file analysis
• C.prevalence
• D.vulnerable software

Which interface mode on the firewall must be deployed on a Cisco Secure Firewall Threat Defense when implementing an IPS using a SPAN port for traffic monitoring?

• A.inline
• B.passive
• C.transparent
• D.routed

A security engineer must add a new policy to block UDP traffic to one server. The engineer adds a new object. Which action must the engineer take next to identify all the UDP ports?

• A.Specify the transport protocol and leave the port number empty.
• B.Define the transport protocol and the mandatory port range.
• C.Add the transport number and specify the type and code.
• D.Add the corresponding IP protocol number for UDP and TCP.

Which action should be taken after editing an object that is used inside an access control policy?

• A.Delete the existing object in use.
• B.Create another rule using a different object name.
• C.Refresh the Cisco FMC GUI for the access control policy.
• D.Redeploy the updated configuration.

A network security engineer must export packet captures from the Cisco FMC web browser while troubleshooting an issue. When navigating to the address https:// < FMC IP > /capture/CAPI/pcap/test.pcap.
an error 403: Forbidden is given instead of the PCAP file. Which action must the engineer take to resolve this issue?

• A.Disable the HTTPS server and use HTTP instead.
• B.Use the Cisco FTD IP address as the proxy server setting on the browser.
• C.Disable the proxy setting on the browser.
• D.Enable the HTTPS server for the device platform policy.