300-710 SNCF Practice Test 10 — 10 Questions

Question 1

What is the result of applying an 'IPS Policy' to an Access Control Rule?

Accepted Answer

It enables deep packet inspection. The IPS policy enables deep packet inspection for the traffic matched by the rule.

Answer

It bypasses decryption

Answer

It blocks traffic based on IP

Answer

It disables the rule

Question 2

Which tab in the Access Control Policy rule editor allows you to specify the source and destination zones?

Accepted Answer

Zones. The 'Zones' tab is where you define ingress and egress zones for the rule.

Answer

Ports

Answer

Networks

Answer

Applications

Question 3

Which TWO items must be defined to create a fully functional Network Object group in FMC?

Accepted Answer

Member Objects. A group needs a name and at least one member (object) assigned to it.

Answer

Object Description

Answer

SNMP Traps

Answer

Routing Table

Question 4

When configuring a NAT rule, which THREE options are valid 'Type' selections within the NAT Rule editor?

Accepted Answer

Static. Static, Dynamic, and Identity are valid NAT types in FTD/FMC.

Answer

Virtual

Answer

Transparent

Question 5

Which THREE actions can be performed by an SSL Decryption Policy?

Accepted Answer

Do Not Decrypt. SSL policy actions include Decrypt, Do Not Decrypt, and Monitor.

Answer

Redirect

Answer

Block

Question 6

What is the primary function of the 'Object Management' section in FMC?

Accepted Answer

To create reusable objects. Object Management is where you create reusable objects for policies.

Answer

To analyze traffic

Answer

To create policies

Answer

To manage firmware

Question 7

When deploying a Cisco Secure Firewall Threat Defense in transparent mode, how are the firewall interfaces configured to pass traffic between segments without routing?

Accepted Answer

Interfaces are grouped into a Bridge Virtual Interface (BVI) bridge group that acts as a Layer 2 bridge.. In transparent mode, the firewall bridges traffic between interfaces using a Bridge Virtual Interface (BVI). The BVI is assigned an IP address for management and Layer 3 functions, while the physical interfaces belong to the bridge group.

Answer

Interfaces are configured with dynamic NAT overload to translate Layer 2 MAC addresses into Layer 3 IPs.

Answer

The firewall acts as an 802.1Q trunk port where all VLANs are terminated on a single subinterface.

Answer

Each physical interface is assigned a distinct IP address in the same subnet.

Question 8

In which mode does the FTD firewall act as a Layer 3 hop and perform NAT?

Accepted Answer

Routed mode. Routed mode is the standard deployment mode where the FTD operates as a Layer 3 device and supports NAT and routing protocols.

Answer

Passive mode

Answer

Inline mode

Answer

Transparent mode

Question 9

When configuring a Port Channel on an FTD, what is the primary benefit of using LACP (Link Aggregation Control Protocol)?

Accepted Answer

It provides automated link negotiation and failure detection.. LACP ensures link integrity by performing negotiation and error checking, preventing misconfiguration in the bundle.

Answer

It increases the throughput limit.

Answer

It bypasses the need for an IP address.

Answer

It converts the port to a virtual switch.

Question 10

In an FTD cluster, which unit is responsible for assigning flow ownership to other units in the cluster?

Accepted Answer

The master unit. The master unit in an FTD cluster handles management, orchestration, and the distribution/assignment of traffic flows to subordinate units.

Answer

The FMC

Answer

The subordinate unit

Answer

The external load balancer