[2026] Cisco Securing Networks with Cisco Firepower

문제1

Which two routing options are valid with Cisco Firepower Threat Defense? (Choose two.)

A. ECMP with up to three equal cost paths across a single interface

B. BGPv4 in transparent firewall mode

C. ECMP with up to three equal cost paths across multiple interfaces

D. BGPv6

E. BGPv4 with nonstop forwarding

정답: C,D

설명: (Fast2test 회원만 볼 수 있음)

문제2

Which two feature does Cisco Trust Anchor support? (Choose two.)

A. flood attack detection.

B. SYN flood detection

C. DDoS mitigation

D. secure boot

E. image signing

정답: D,E

문제3

Which command must be run to generate troubleshooting files on an FTD?

A. sudo sf_troubleshoot.pl

B. system generate-troubleshoot all

C. system support view-files

D. show tech-support

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제4

Which feature is supported by IRB on Cisco FTD devices?

A. high-availability cluster

B. dynamic routing protocol

C. EtherChannel interface

D. redundant interface

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제5

An organization has a Cisco IPS running in inline mode and is inspecting traffic for malicious activity. When traffic is received by the Cisco IRS, if it is not dropped, how does the traffic get to its destination?

A. It is transmitted out of the Cisco IPS outside interface.

B. It is routed back to the Cisco ASA interfaces for transmission.

C. It is retransmitted from the Cisco IPS inline set.

D. The packets are duplicated and a copy is sent to the destination.

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제6

An engineer is configuring a custom application detector for HTTP traffic and wants to import a file that was provided by a third party. Which type of flies are advanced application detectors creates and uploaded as?

A. LUA script

B. Python program

C. NBAR protocol

D. Perl script

정답: A

문제7

Which command is run on an FTD unit to associate the unit to an FMC manager that is at IP address 10.0.0.10, and that has the registration key Cisco123?

A. configure manager add 10.0.0.10 Cisco123

B. configure manager local Cisco123 10.0.0.10

C. configure manager local 10.0.0.10 Cisco123

D. configure manager add Cisco123 10.0.0.10

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제8

A network engineer is extending a user segment through an FTD device for traffic inspection without creating another IP subnet.
How is this accomplished on an FTD device in routed mode?

A. by bypassing protocol inspection by leveraging pre-filter rules

B. by using a BVI and create a BVI IP address in the same subnet as the user segment

C. by leveraging the ARP to direct traffic through the firewall

D. by assigning an inline set interface

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제9

A network engineer must configure IPS mode on a Secure Firewall Threat Defense device to inspect traffic and act as an IDS. The engineer already configured the passive-interface on the Secure Firewall Threat Defense device and SPAN on the switch. What must be configured next by the engineer?

A. active interface on the Secure Firewall Threat Defense device

B. active SPAN port on the switch

C. intrusion policy on the Secure Firewall Threat Defense device

D. DHCP on the switch

정답: C

설명: (Fast2test 회원만 볼 수 있음)

Cisco Securing Networks with Cisco Firepower - 300-710무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트