Free Access Cisco.300-710.v2022-02-09.q144 Practice Test (Page 11)

Question 46

A network engineer is extending a user segment through an FTD device for traffic inspection without creating another IP subnet How is this accomplished on an FTD device in routed mode?

A.by leveraging the ARP to direct traffic through the firewall

B.by assigning an inline set interface

C.by using a BVI and create a BVI IP address in the same subnet as the user segment

D.by bypassing protocol inspection by leveraging pre-filter rules
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/transparent_or_routed_firewall_mode_for_firepower_threat_defense.html

Question 47

Which two dynamic routing protocols are supported in Firepower Threat Defense without using FlexConfig?
(Choose two.)

A.EIGRP

B.OSPF

C.static routing

D.IS-IS

E.BGP

Question 48

A network engineer is tasked with minimising traffic interruption during peak traffic limes. When the SNORT inspection engine is overwhelmed, what must be configured to alleviate this issue?

A.Enable Pre-filter policies before the SNORT engine failure.

B.Enable IPS inline link state propagation

C.Set a Trust ALL access control policy.

D.Enable Automatic Application Bypass.

Question 49

With Cisco Firepower Threat Defense software, which interface mode must be configured to passively receive traffic that passes through the appliance?

A.inline set

B.passive

C.routed

D.inline tap

Question 50