300-710 SNCF Practice Test 10 — 10 Questions

Question 1

Which TWO methods can be used to identify users in an Identity Policy?

Accepted Answer

Captive Portal. Passive (ISE/AD) and Active (Captive Portal) are the main identification methods.

Answer

DHCP Snooping

Answer

RADIUS Proxy

Answer

SNMP Polling

Question 2

When configuring an FTD in Transparent Mode, how is the 'Bridge Group' created?

Accepted Answer

In Device Management > Interfaces. Bridge groups are created in the Device Management interface configuration section.

Answer

In the Access Control Policy

Answer

In the Security Zone settings

Answer

In the Platform Settings

Question 3

When using the 'Search' feature in the Access Control Policy, which filter allows you to find all rules containing a specific network object?

Accepted Answer

Filter by Network. The rule editor allows filtering rules based on their contents like networks, zones, or applications.

Answer

Filter by Action

Answer

Filter by Name

Answer

Filter by Zone

Question 4

What is the primary function of the 'Object Management' section in FMC?

Accepted Answer

To create reusable objects. Object Management is where you create reusable objects for policies.

Answer

To analyze traffic

Answer

To create policies

Answer

To manage firmware

Question 5

What is the purpose of an 'FQDN' object in FMC?

Accepted Answer

To define a domain name. FQDN objects are used to define network resources by domain name, which the FTD resolves.

Answer

To define a protocol port

Answer

To define a zone

Answer

To define a static IP

Question 6

Which TWO tasks are required to delete a NAT rule safely?

Accepted Answer

Deploy changes. Before deleting, ensure no other policies reference it and save/deploy the changes.

Answer

Backup the FMC

Answer

Disable the rule

Answer

Rename the rule

Question 7

Which tab in the Access Control Policy rule allows you to choose the 'Logging' action?

Accepted Answer

Logging. The Logging tab in the rule editor is dedicated to logging configuration.

Answer

General

Answer

Inspection

Answer

Advanced

Question 8

An engineer is configuring dynamic routing using OSPF on a Cisco Secure Firewall Threat Defense device managed by FMC. Which TWO configuration steps are required to establish an OSPF adjacency? (Choose two)

Accepted Answer

Create an OSPF routing process and define the OSPF area ID in FMC under Device Routing settings.. OSPF setup on FTD requires enabling the OSPF process globally and configuring the specific interfaces within the area with correct parameters.

Answer

Set the firewall operating mode to passive NGIPS.

Answer

Configure the management interface as an OSPF passive interface.

Answer

Configure a Bridge Virtual Interface (BVI) for every OSPF neighbor.

Question 9

An administrator is deploying a Cisco Secure Firewall Threat Defense High Availability pair. During the initial configuration in Cisco FMC, the administrator assigns specific priority values. How does the failover process use the primary and secondary unit designations and priorities?

Accepted Answer

The active unit is chosen based on health status, preemption settings, and designated failover priorities.. In an Active/Standby HA pair, the unit configured with the higher priority or designated role determines preemption and active state behavior when both units boot up simultaneously.

Answer

Both units actively share the workload in an active-active load-balanced state.

Answer

The unit designated as Primary always becomes Active, ignoring preemption or health status.

Answer

The unit with the lowest management IP address is automatically elected as Active.

Question 10

You are deploying a Cisco Secure Firewall Threat Defense cluster in a data center environment. Which deployment requirement must be strictly followed regarding the control link and data interfaces?

Accepted Answer

The control link must be a dedicated, low-latency interface completely separated from data traffic handling.. Clustered FTD units require a dedicated control plane network (control link) with low latency and high bandwidth, separate from data interfaces, to synchronize state and management data.

Answer

All cluster members must reside in different Layer 2 broadcast domains to prevent spanning-tree loops.

Answer

Cluster units can share data interfaces for control synchronization as long as Jumbo frames are enabled on the switch.

Answer

Clustering is supported only in transparent firewall mode; routed mode disables clustering capabilities.