300-710 SNCF Practice Test 31 — 15 Questions

Question 1

An engineer is troubleshooting a newly deployed FTD device where syslog messages are not reaching the external syslog server. Which tool on the FTD CLI can the engineer use to verify if the syslog generation and transmission process is attempting to send packets out the management or data interface?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Capture traffic on the designated egress interface matching the syslog server IP and UDP port 514.. The 'system support syslog-ng' configuration and debugging tools or packet captures on the management interface verifying UDP port 514 traffic help troubleshoot syslog issues. Specifically, packet captures or debugging the logging subsystem.

Answer

Run 'debug syslog all' from the FTD expert mode.

Answer

Use 'system support reset-logging'.

Answer

Check the FMC dashboard under System > Logging > Syslog status.

Question 2

An administrator needs to schedule automated weekly backups of the FMC configuration and store them securely on a remote SCP server. Where is remote backup storage configured in the FMC GUI?

Accepted Answer

System > Tools > Backup / Restore > Remote Storage. Remote storage locations for backups (such as FTP, SFTP, SCP) are configured under System > Tools > Backup / Restore > Remote Storage Settings.

Answer

Devices > Device Management > Backup

Answer

System > Integration > SCP Servers

Answer

Objects > Object Management > Servers > Backup

Question 3

An engineer has modified several access control rules and object groups on the FMC. Before deploying these changes to the FTD, the engineer wants to review all pending changes to ensure no unauthorized modifications are included. Where in the FMC GUI should the engineer go to view pending deployment changes?

Accepted Answer

Deploy > Deployment (or clicking the Deploy icon in the top header). Pending changes on the FMC are reviewed by navigating to Deploy > Deployment (or clicking the Pending Changes icon/button in the top right banner).

Answer

Objects > Object Management > Diff Viewer

Answer

Analysis > Audit > Pending

Answer

System > Updates > Pending Changes

Question 4

An administrator wants to verify the NTP synchronization status and time offset on a managed FTD device from the FMC GUI. Where can this health and system information be viewed?

Accepted Answer

Devices > Device Management > Edit Device > General / Platform Settings. System settings such as NTP, time zone, and DNS are viewed and configured under Devices > Device Management, selecting the device, and looking at the Device Details or Platform Settings.

Answer

Policies > Platform Settings > Time Synchronization

Answer

System > Health > NTP Status

Answer

Analysis > Dashboards > Time Sync

Question 5

An administrator successfully restores an FMC backup onto a freshly deployed FMC virtual appliance of the exact same software version. However, after the restore completes, all managed FTD devices show a status of 'Offline' or 'Config Apply Failed'. What is the most likely root cause and correct resolution?

Accepted Answer

The new FMC has a different system UUID and Internal Certificate Authority keys; the administrator must re-establish trust by re-registering the FTD devices using new registration keys.. When restoring an FMC backup to a new appliance, the Internal CA (Public/Private keys) changes unless it is a bare-metal restore using the exact same hardware UUID or proper registration re-establishment. Often, registration keys must be re-configured or mutual TLS certificates synchronized because the new FMC instance has a different registration identity.

Answer

The FTD management interface IP addresses must be manually changed to match the old FMC management subnet.

Answer

The administrator must run 'configure manager add' on the FMC CLI to force an SNMP trap listener.

Answer

The FTD devices automatically wipe their configurations when an FMC backup is restored; the administrator must factory reset every FTD.

Question 6

When configuring FMC backup schedules, which TWO storage options are natively supported for the backup files?

Accepted Answer

Remote SCP server. FMC supports local storage (to the management appliance) and remote storage via SCP or FTP/SFTP.

Answer

Local USB drive

Answer

Cloud S3 storage bucket

Answer

Centralized Syslog server

Question 7

An administrator is troubleshooting a policy deployment failure between an FMC and an FTD. Which THREE log files on the FTD contain relevant information regarding policy application and deployment tasks? (Choose three)

Accepted Answer

Configuration application logs (such as /var/sf/log/cc-daemon.log or related config logs). Policy deployment tasks on FTD are handled by daemons whose logs reside in /var/log/cisco/ or /var/sf/log/, such as deployment and configuration application logs.

Answer

/var/log/auth.log

Answer

/var/log/kern.log

Question 8

An FMC administrator is troubleshooting a scenario where device registration between an FTD and FMC fails immediately with a registration key mismatch error. The administrator verified the NAT ID and registration key. What underlying protocol handshake fails during this registration process, and how can it be debugged?

Accepted Answer

The sftunnel (TCP 8305) handshake fails; debug using 'sftunnel status' and examining /var/log/sftunnel.log.. Registration between FMC and FTD relies on sftunnel (TCP port 8305). Troubleshooting involves checking sftunnel status and certificates using CLI tools on both FMC and FTD.

Answer

The HTTPS REST API (TCP 443) handshake fails; debug using 'debug rest-api'.

Answer

The SNMP trap receiver fails; debug using 'system support snmp-debug'.

Answer

The SSH tunnel (TCP 22) fails; debug using 'tail -f /var/log/secure'.

Question 9

An administrator is investigating an issue where connection events are failing to reach the FMC from a managed FTD. Which THREE daemons or logs on the FTD and FMC should be checked to troubleshoot event transport and communication issues? (Choose three)

Accepted Answer

FTD event streaming and SFIMS logs. Event transport relies on processes like msg, sftunnel, and connection streaming daemons. Checking /var/log/cisco/sftunnel.log and event collection logs helps isolate the problem.

Answer

/var/log/dhcpd.log

Answer

/var/log/samba/smb.log

Question 10

An FTD high-availability pair is experiencing split-brain behavior due to a unidirectional failure of the state and heartbeat links. As a result, both units are claiming to be Active. Which CLI command on the FTD should an administrator use to troubleshoot interface failover status and verify interface health across the failover link?

Accepted Answer

show failover. To check failover status and health on an FTD device, administrators use the diagnostic CLI command 'show failover' or 'show failover history'.

Answer

system support failover-check

Answer

show cluster info

Answer

ha-manager status --detailed

Question 11

An FMC high availability (HA) pair has split-brain symptoms due to a management network failure. After restoring network connectivity, the standby unit remains in a 'Failed' state and does not automatically re-synchronize. What is the correct procedure to recover the HA sync?

Accepted Answer

Go to System > Integration > HA, break the HA pairing, and re-establish it using the active unit as the primary.. When FMC HA encounters persistent sync issues after network restoration, the administrator must break the HA relationship and re-establish it, or use the system-level HA synchronization tools to force a re-sync from active to standby.

Answer

Run 'system support fmc-ha-sync' from the standby FMC CLI.

Answer

Reboot both FMC units simultaneously.

Answer

From the primary FMC CLI, run 'configure ha restore-sync'.

Question 12

An administrator notices that health alerts from managed FTD devices are not appearing in the FMC health monitor, although traffic logs are updating normally. Which service or daemon on the FMC is primarily responsible for collecting and processing health and performance metrics from managed devices?

Accepted Answer

healthd. The sftunnel daemon manages communication between FMC and FTD for control traffic, while specific health daemons handle metrics. Specifically, the 'healthd' process on FMC processes health monitoring data.

Answer

mgmtd

Answer

snort

Answer

dbus

Question 13

An administrator is preparing an upgrade plan for an FMC and its managed FTD devices. Which THREE best practices should be followed during the upgrade process to minimize downtime and avoid failure? (Choose three)

Accepted Answer

Take a complete backup of the FMC and export device configurations prior to starting the upgrade.. Best practices include reading release notes for upgrade paths, taking backups before upgrading, running pre-upgrade checkers, and upgrading FMC before FTD devices.

Answer

Factory reset all FTD devices immediately after pushing the upgrade package.

Answer

Disable the sftunnel service permanently during the upgrade to prevent packet inspection.

Question 14

An FTD device is failing to register with the FMC. The administrator confirms connectivity via ping. Which CLI command should the administrator run on the FTD to verify the registration status and the shared secret handshake?

Accepted Answer

show manager. The 'show manager' command displays the registration status, the FMC IP, and whether the connection is currently established or pending.

Answer

show registration status

Answer

show fmc connection

Answer

show interface management

Answer

show network manager

Question 15

An administrator notices that health monitors on the FMC show a critical warning for high disk utilization on the /var partition of an FTD device. What is the safest and most standard method to resolve disk space exhaustion caused by accumulated core files and rotated logs on FTD?

Accepted Answer

Use the FTD CLI command 'system support clean-core' and delete old rotated log files.. The command 'system support purge log' or clearing rotated logs and core files via expert mode is used, but specifically, FMC allows administrators to manage and delete core files and rotated logs safely through the FTD CLI or FMC device management settings.

Answer

Delete files directly in the /mnt/disk0/ directory using rm -rf without checking dependencies.

Answer

Re-image the FTD device using a bootable USB drive.

Answer

Run 'system support reset-all' from the FTD CLI.