300-710 Tested & Approved CCNP Security Study Materials [Q110-Q128]

QUESTION 110
An engineer is setting up a new Firepower deployment and is looking at the default FMC policies to start the implementation During the initial trial phase, the organization wants to test some common Snort rules while still allowing the majority of network traffic to pass Which default policy should be used?

QUESTION 111
Refer to the exhibit.

What must be done to fix access to this website while preventing the same communication to all other websites?

QUESTION 112
A network engineer is configuring URL Filtering on Firepower Threat Defense. Which two port requirements on the Firepower Management Center must be validated to allow communication with the cloud service? (Choose two.)

QUESTION 113
Which object type supports object overrides?

QUESTION 114
Which two actions can be used in an access control policy rule? (Choose two.)

QUESTION 115
Which Cisco Firepower rule action displays an HTTP warning page?

QUESTION 116
A security engineer is configuring a remote Cisco FTD that has limited resources and internet bandwidth. Which malware action and protection option should be configured to reduce the requirement for cloud lookups?

QUESTION 117
When deploying a Cisco ASA Firepower module, an organization wants to evaluate the contents of the traffic without affecting the network. It is currently configured to have more than one instance of the same device on the physical appliance Which deployment mode meets the needs of the organization?

QUESTION 118
An engineer is setting up a new Firepower deployment and is looking at the default FMC policies to start the implementation During the initial trial phase, the organization wants to test some common Snort rules while still allowing the majority of network traffic to pass Which default policy should be used?

QUESTION 119
Which command-line mode is supported from the Cisco FMC CLI?

QUESTION 120
A company wants a solution to aggregate the capacity of two Cisco FTD devices to make the best use of resources such as bandwidth and connections per second. Which order of steps must be taken across the Cisco FTDs with Cisco FMC to meet this requirement?

QUESTION 121
An engineer wants to perform a packet capture on the Cisco FTD to confirm that the host using IP address 192 168.100.100 has the MAC address of 0042 7734.103 to help troubleshoot a connectivity issue What is the correct tcpdump command syntax to ensure that the MAC address appears in the packet capture output?

QUESTION 122
With Cisco FTD integrated routing and bridging, which interface does the bridge group use to communicate with a routed interface?

QUESTION 123
What are two application layer preprocessors? (Choose two.)

QUESTION 124
When creating a report template, how can the results be limited to show only the activity of a specific subnet?

QUESTION 125
An organization has seen a lot of traffic congestion on their links going out to the internet.
There is a Cisco Firepower device that processes all of the traffic going to the internet prior to leaving the enterprise.
How is the congestion alleviated so that legitimate business traffic reaches the destination?

QUESTION 126
What is the disadvantage of setting up a site-to-site VPN in a clustered-units environment?

QUESTION 127
Which two packet captures does the FTD LINA engine support? (Choose two.)

QUESTION 128
What is the result of specifying of QoS rule that has a rate limit that is greater than the maximum throughput of an interface?