300-710 SNCF Practice Test 7 — 10 Questions

Question 1

How do you identify which Access Control Rule triggered a specific connection log?

Accepted Answer

Check the 'Rule Name' field in the connection event. The connection event log contains a field identifying the specific Rule Name that matched.

Answer

Check the 'Policy Name' field

Answer

Check the 'Device Name'

Answer

Check the 'Ingress Zone'

Question 2

You are creating a custom URL category. How do you add specific domains to this category in FMC?

Accepted Answer

Via Objects > Object Management > URL. Custom URL objects are created in the Object Manager and then assigned to the category.

Answer

In the SSL Policy

Answer

Directly in the Access Control rule

Answer

In the Prefilter Policy

Question 3

What is the primary function of a 'Security Zone' in FMC?

Accepted Answer

To logically group interfaces. Security Zones allow applying the same policy to multiple interfaces at once.

Answer

To set bandwidth limits

Answer

To enable routing

Answer

To define IP ranges

Question 4

When configuring a QoS policy, what happens if you exceed the 'Rate Limit' set for a traffic class?

Accepted Answer

The excess traffic is policed. Traffic exceeding the rate limit is policed (dropped or shaped).

Answer

The traffic is redirected to another interface

Answer

The traffic is logged as critical

Answer

The connection is reset

Question 5

Which tab in the FMC Object Manager allows you to manage pre-defined objects?

Accepted Answer

System Objects. FMC provides a list of pre-defined objects under the 'Network' or 'Port' categories; you can filter for 'System' objects.

Answer

User Objects

Answer

Global Objects

Answer

Custom Objects

Question 6

You are configuring a static route on a Cisco Secure Firewall Threat Defense using FDM. Which parameters are strictly required to create a valid IPv4 static route?

Accepted Answer

Destination IP network, subnet mask, and next-hop IP address or egress interface.. A valid static route requires a destination network (prefix/mask), and either a next-hop IP address or an egress outgoing interface.

Answer

MAC address of the next-hop router and security zone name.

Answer

IP SLA tracking object ID and weighted cost metric.

Answer

Source IP address, destination IP address, and BGP Autonomous System number.

Question 7

Which TWO items must be defined to create a fully functional Network Object group in FMC?

Accepted Answer

Member Objects. A group needs a name and at least one member (object) assigned to it.

Answer

Object Description

Answer

SNMP Traps

Answer

Routing Table

Question 8

When configuring a NAT rule, which THREE options are valid 'Type' selections within the NAT Rule editor?

Accepted Answer

Static. Static, Dynamic, and Identity are valid NAT types in FTD/FMC.

Answer

Virtual

Answer

Transparent

Question 9

What is the result of assigning a 'Trust' action to a rule in an Access Control Policy?

Accepted Answer

Traffic is permitted without inspection. Trust allows traffic through the firewall without any further inspection by the Snort engine.

Answer

Traffic is inspected by IPS

Answer

Traffic is blocked

Answer

Traffic is decrypted

Question 10

What is the purpose of 'Network Discovery' in FMC?

Accepted Answer

To identify hosts and user activity. Network Discovery identifies hosts, applications, and operating systems on the network.

Answer

To push firmware updates

Answer

To configure routing protocols

Answer

To perform active IPS scanning