300-710 SNCF Practice Test 32 — 15 Questions

Question 1

An administrator is performing a backup and restore operation on an FMC appliance. Which THREE statements are correct regarding the FMC restore process? (Choose three)

Accepted Answer

Restoring a backup overwrites the existing configuration and database on the target FMC.. When restoring an FMC backup, the target appliance must generally be running the exact same software version, the restore process overwrites existing configurations, and it requires proper system initialization.

Answer

Backups can be restored across major software version differences (e.g., restoring a v6.2 backup directly onto v7.4).

Answer

Restoring an FMC backup automatically restores all connected FTD local flash images.

Question 2

An administrator is preparing to upgrade an FMC and its managed FTD devices from version 6.6.x to 7.2.x. What is the mandatory prerequisite regarding upgrade paths and compatibility checks?

Accepted Answer

Run the FMC Upgrade Readiness Tool (URT) to check for configuration and database incompatibilities.. Cisco mandates running the FMC Upgrade Readiness Tool (URT) before performing any major version upgrade to identify schema, database, or configuration incompatibilities.

Answer

Upgrade all FTD devices to 7.2.x before upgrading the FMC.

Answer

Export the security policy, wipe the FMC, and re-import the policy on version 7.2.

Answer

Delete all historical event data to ensure the database fits within the 7.2 schema limits.

Question 3

An engineer deploys an Access Control Policy change from the FMC to a managed FTD device. The task hangs in the Deployment History with a status of 'Applying' for an extended period. Upon checking the FTD CLI, the engineer notices a locked deployment file or stuck process. What action should be taken to clear or restart the deployment process safely?

Accepted Answer

Cancel the task in the FMC Task Manager (System > Task Monitor), verify deployment locks, and re-attempt the deployment after clearing pending changes.. If a deployment hangs, administrators can check deployment status, cancel or restart the deployment daemon (sfims) or use the task manager in FMC to cancel the task. On the FTD, checking the deployment status or restarting management services may be required.

Answer

Power cycle the physical FTD chassis immediately using the hardware power switch.

Answer

Delete the Access Control Policy and recreate it with a new name.

Answer

Run 'reload factory-default' from the FTD CLI to reset the management plane.

Question 4

An administrator wants to ensure that packet captures taken on an FTD can be analyzed easily. Which TWO ways can packet capture files (.pcap) be retrieved from the FMC? (Choose two)

Accepted Answer

Download the .pcap file directly through the FMC GUI under Device Management > Packet Capture.. FMC allows administrators to download packet capture files directly through the GUI via Devices > Device Management > Packet Capture or view them in real-time.

Answer

Stream pcap files via SNMP traps to an NMS.

Answer

Email the raw binary capture automatically to Cisco Smart Licensing servers.

Answer

Automatically print the .pcap hex output to the connected serial console port line-by-line.

Question 5

An administrator is troubleshooting asymmetric routing issues across an FTD firewall using the FMC connection events and FTD CLI. The administrator wants to disable TCP state bypass or adjust TCP normalization settings to allow non-synchronized SYN packets through for a specific application. Where are TCP normalization and stateful inspection parameters configured for FTD?

Accepted Answer

Devices > Platform Settings > Edit Policy > Stateful Inspection / TCP Settings. TCP normalization, stateful inspection settings, and TCP bypass options are configured under Platform Settings policy applied to the FTD device.

Answer

Policies > Access Control > Advanced > Network Settings

Answer

Objects > Object Management > Advanced > TCP State

Answer

System > Configuration > Global Parameters > TCP

Question 6

An administrator is troubleshooting a policy deployment failure from the Firepower Management Center (FMC) to a managed Firepower Threat Defense (FTD) device. The deployment hangs at 33 percent with an error related to snort synchronization. Which tool should the administrator use on the FTD CLI to examine the real-time Snort rule compilation and policy application process?

Accepted Answer

Expert mode and check /var/log/pm/pm.log and Snort startup logs. The system support ftw command or tailing the /var/log/messages and /var/log/pm/pm.log files along with examining snort compilation logs provides deep insight into deployment failures. Specifically, monitoring the deployment task manager and pm logs reveals why snort synchronization hangs.

Answer

System Support Diagnostic (system support diagnostic)

Answer

show deploy-status

Answer

system support firewall-engine-debug

Question 7

An administrator wants to configure automated backup generation on the FMC and ensure that backup archives are securely offloaded to a remote server. Where is this configured in the FMC GUI?

Accepted Answer

System > Tools > Backup / Restore. System > Tools > Backup/Restore allows administrators to configure scheduled automated backups and define remote storage locations such as SFTP servers.

Answer

Administration > Local Storage > Backup

Answer

Devices > Device Management > Tools > Backup

Answer

System > Configuration > Backup

Question 8

An FMC managed deployment is experiencing slow GUI performance and delayed event reporting. The administrator suspects database table bloat in the FMC PostgreSQL database. Which utility or command can the administrator run from the FMC expert shell to analyze and vacuum/optimize the database safely?

Accepted Answer

Execute the FMC database optimization script or use 'system support database-optimizer' if available, or consult Cisco documentation for running vacuum scripts via the sf bin directory.. FMC provides specialized database maintenance scripts, such as 'sfdblist' or database optimization tools located in /usr/local/sf/bin/ or invoked via specific admin CLI utilities.

Answer

Use the FMC GUI under System > Database > Purge and click 'Format Storage'.

Answer

Run 'pg_ctlcluster 12 main restart' in the root shell.

Answer

Execute 'drop database sf_db; recreate database;' from the PostgreSQL prompt.

Question 9

An administrator is setting up health monitoring alerts on the FMC. Which TWO notification methods can be configured when a health alert is triggered? (Choose two)

Accepted Answer

Email notification. FMC health monitor alert responses support sending email notifications and generating SNMP traps.

Answer

Automated SMS text message directly via built-in cellular SIM

Answer

Direct Bluetooth broadcast

Answer

Automated phone call via SIP trunking

Question 10

An administrator is troubleshooting a scenario where configuration deployment from FMC to an FTD device fails with a 'Deployment Validation Error'. Where can the administrator view the detailed validation messages and deployment task history?

Accepted Answer

System > Monitoring > Task Manager. Deployment status, task history, and detailed error logs are available under Message Center or System > Monitoring > Task Manager in the FMC.

Answer

Objects > Object Management > History

Answer

Analysis > Intrusions > Events

Answer

Devices > Platform Settings > Deployment Log

Question 11

An engineer needs to troubleshoot connectivity through an FTD firewall and wants to use the FTD packet tracer utility. Which THREE parameters are required when executing a basic packet tracer command from the diagnostic CLI? (Choose three)

Accepted Answer

Protocol (such as tcp, udp, or icmp). The packet-tracer syntax requires specifying the ingress interface, protocol (tcp, udp, icmp), source IP, source port (for tcp/udp), destination IP, and destination port.

Answer

SNMP community string

Answer

Packet payload hex string

Question 12

When performing a packet capture on an FTD device, how can you filter the traffic to only capture traffic from a specific source IP address?

Accepted Answer

capture cap1 interface outside host 192.168.1.1. The capture command supports standard ACL syntax or direct host/network filters to limit the scope of the capture.

Answer

capture cap1 ip 192.168.1.1

Answer

capture cap1 match 192.168.1.1

Answer

capture cap1 filter src 192.168.1.1

Answer

capture cap1 interface outside address 192.168.1.1

Question 13

An engineer suspects that asymmetric routing is causing packets to be dropped by the FTD firewall. Which command should the engineer run on the FTD CLI to check for dropped packets and view drop reasons in real time?

Accepted Answer

system support firewall-engine-debug with tracing enabled. The command 'system support firewall-engine-debug' allows capturing packet flow and seeing exact drop reasons, but for real-time drop statistics, 'show asp drop' (inherited from ASA lineage) or examining packet tracer output is used. On FTD, packet tracing and drop debugs are standard.

Answer

show snort statistics drops

Answer

debug crypto ipsec

Answer

show interface counters drops

Question 14

An administrator needs to verify the license status and active feature subscriptions (such as URL Filtering, Malware, and IPS) on an FMC. Where should the administrator check this information in the FMC GUI?

Accepted Answer

System > Licenses > Smart Licenses. License management and feature activations on the FMC are located under System > Licenses > Smart Licenses.

Answer

Policies > Access Control > Subscriptions

Answer

Objects > Object Management > Licensing

Answer

Devices > Device Management > Licenses

Question 15

An administrator is troubleshooting a VPN tunnel termination issue on an FTD device. To check IPsec Phase 1 and Phase 2 security associations (SAs) and real-time crypto debugging messages, which command should be executed on the FTD diagnostic CLI?

Accepted Answer

Access the diagnostic CLI via 'system support diagnostic-cli' and run 'show crypto ipsec sa' and 'show crypto isa sa'.. To view VPN security associations and run crypto debugging on FTD, administrators enter the diagnostic CLI using 'system support diagnostic-cli' and run commands such as 'show crypto ipsec sa' and 'debug crypto ipsec'.

Answer

Run 'system support VPN-debug enable' from the FTD expert shell.

Answer

Run 'vpn session print' in the expert mode root shell.

Answer

Execute 'show vpn-status' from the FMC CLI.