Free Access Cisco.300-710.v2022-04-26.q66 Practice Test (Page 11)

Question 46

Refer to the exhibit.

An engineer is modifying an access control policy to add a rule to Inspect all DNS traffic that passes it making the change and deploying the policy, they see that DNS traffic Is not being Inspected by the Snort engine. What is......

A.The rule must specify the security zone that originates the traffic.

B.The rule must define the source network for inspection as well as the port.

C.The rule Is configured with the wrong setting for the source port.

Question 47

In which two ways do access control policies operate on a Cisco Firepower system? (Choose two.)

A.The system performs intrusion inspection followed by file inspection.

B.The system performs a preliminary inspection on trusted traffic to validate that it matches the trusted parameters.

C.Traffic inspection can be interrupted temporarily when configuration changes are deployed.

D.File policies use an associated variable set to perform intrusion prevention.

E.They can block traffic based on Security Intelligence data.

Question 48

An engineer is building a new access control policy using Cisco FMC. The policy must inspect a unique IPS policy as well as log rule matching. Which action must be taken to meet these requirements?

A.Configure an IPS policy and enable global logging.

B.Disable the default IPS policy and enable global logging.

C.Configure an IPS policy and enable per-rule logging.

D.Disable the default IPS policy and enable per-rule logging.

Question 49

An engineer configures a network discovery policy on Cisco FMC. Upon configuration, it is noticed that excessive and misleading events filing the database and overloading the Cisco FMC. A monitored NAT device is executing multiple updates of its operating system in a short period of time. What configuration change must be made to alleviate this issue?

A.Leave default networks.

B.Change the method to TCP/SYN.

C.Increase the number of entries on the NAT device.

D.Exclude load balancers and NAT devices.

Question 50

What is the maximum bit size that Cisco FMC supports for HTTPS certificates?

A.4096

B.1024

C.2048

D.8192

Other Version: 970Cisco.300-710.v2025-02-05.q229; 903Cisco.300-710.v2024-05-22.q206; 1647Cisco.300-710.v2023-04-04.q213; 3821Cisco.300-710.v2022-07-27.q166; 3572Cisco.300-710.v2022-02-09.q144; 59Cisco.Fast2test.300-710.v2022-01-03.by.winifred.106q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 151Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 165TheSecOpsGroup.CNSP.v2025-09-08.q20; 223CFAInstitute.ESG-Investing.v2025-09-08.q173; 173PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 151Salesforce.Data-Architect.v2025-09-05.q216; 146Adobe.AD0-E605.v2025-09-05.q50

Question 46

Question 47

Question 48

Question 49

Question 50

Download PDF File