300-710 SNCF Configuration — 100 Questions

Question 1

An administrator is configuring a network object in the FMC to represent a range of IP addresses from 192.168.1.100 to 192.168.1.200. Which object type should be created?

Accepted Answer

Range. The Range object type allows defining a contiguous sequence of IP addresses from a start IP to an end IP.

Answer

FQDN

Answer

Network

Answer

Host

Question 2

An engineer needs to prioritize voice traffic (DSCP EF) over a constrained WAN interface on an FTD device. Where must the QoS policy be configured and applied?

Accepted Answer

Policies > Access Control > Advanced > QoS, assigned to specific interfaces. QoS policies are created under Objects > QoS > QoS and then applied to an Access Control Policy, specifically assigned to desired egress or ingress interfaces.

Answer

Objects > QoS Policy > Applied globally via Platform Settings

Answer

Policies > Prefilter > QoS Rate Limiting

Answer

Devices > NAT > Advanced QoS tab

Question 3

An administrator is configuring manual NAT and needs to ensure that the original source port is preserved during translation without port overloading. Which feature should be selected in the manual NAT rule?

Accepted Answer

Check 'Original Port' in the Translated Port settings. Port translation settings in manual NAT include 'Round Robin' or preserving source ports when doing source NAT translations.

Answer

Check 'Pat Pool' with 'Round Robin'

Answer

Disable 'No Proxy ARP'

Answer

Enable 'DNS Server' translation mode

Question 4

An administrator is configuring an SSL/TLS Decryption Policy. Which TWO decryption actions are available in FMC SSL rules? (Choose two)

Accepted Answer

Do Not Decrypt. FMC SSL/TLS decryption policy rule actions include Do Not Decrypt, Decrypt - Resign, and Decrypt - Inbound.

Answer

Decrypt - Terminate and Drop

Answer

Decrypt - Bypass

Question 5

An administrator wants to configure QoS on an FMC-managed FTD device. Which TWO components are required to successfully implement a QoS policy? (Choose two)

Accepted Answer

Association of the QoS policy within an Access Control Policy targeting specific interfaces. QoS implementation requires creating a QoS policy under Objects and applying it to an Access Control policy assigned to specific interfaces.

Answer

Platform Settings QoS global service activation

Answer

A Prefilter FastPath rule defining the QoS bandwidth

Answer

Manual NAT port forwarding rules

Question 6

An administrator is configuring a new Access Control Policy on the FMC and needs to ensure that HTTP traffic matching a specific URL category is blocked before security inspection to optimize performance. Which policy type should be configured?

Accepted Answer

Prefilter Policy. Prefilter policies are processed before access control and inspection, allowing fast path, slow path, or block actions based on tunnels, VLANs, or URL categories to optimize device performance.

Answer

SSL Decryption Policy

Answer

Intrusion Policy

Answer

Access Control Policy Advanced Settings

Question 7

An organization requires that Quality of Service (QoS) be enforced on an FTD interface to limit outbound traffic for a specific guest network object to 2 Mbps. Where within the FMC interface is this QoS policy applied?

Accepted Answer

Under Devices > Device Management > QoS tab applied to interfaces. QoS policies must be applied to specific security zones or interfaces via the Platform Settings or device interface configuration, linked to the Access Control Policy.

Answer

Inside the Access Control Policy rules directly on individual rule actions

Answer

Within the Prefilter Policy configuration tab

Answer

Inside the Intrusion Policy advanced settings

Question 8

An administrator needs to create a reusable network object in the FMC representing a range of IP addresses from 192.168.1.100 to 192.168.1.200. Which object type should be created under Object Management?

Accepted Answer

Range Object. The Range object type in FMC allows the definition of a continuous span of IP addresses using a start and end address.

Answer

FQDN Object

Answer

Network Group Object

Answer

Host Object

Question 9

An administrator is creating custom Port objects in the FMC Object Management menu to be used in an Access Control Policy. The port needs to cover a range of TCP ports from 5000 to 5050. Which object type should the administrator create?

Accepted Answer

Port Range. In FMC Object Management, ports can be grouped or defined as a single port, port range, or port list. A continuous set of numbers like 5000-5050 requires a Port Range object.

Answer

Network Object Set

Answer

Port List

Answer

Protocol Object

Question 10

An administrator is configuring an Access Control Policy rule in FMC to secure an enterprise network. Which THREE match criteria are natively available under the Ports tab of an Access Control Rule? (Choose three)

Accepted Answer

Destination Ports. In an Access Control Policy rule, the Ports tab allows matching on Source Ports and Destination Ports. Additionally, users can select protocol objects or define port lists.

Answer

URL Categories

Answer

ICMP Type and Code

Question 11

Which TWO settings must be configured in an Access Control Policy to enable strict URL filtering based on reputation?

Accepted Answer

Select URL categories or reputations in the rule. URL filtering requires enabling URL filtering in the policy and defining specific URL categories or reputations.

Answer

Define custom URL objects

Answer

Enable SSL Decryption

Answer

Configure a Prefilter policy

Question 12

Which THREE settings are part of the 'Interface' configuration within an Access Control rule?

Accepted Answer

Destination Zone. Rules use source and destination zones, or individual interfaces.

Answer

Switchport ID

Answer

VLAN Tag

Question 13

Which protocol is used by the FMC to monitor the health of managed FTD devices?

Accepted Answer

HTTPS. FMC uses health policies and management channel heartbeats to track device status.

Answer

SSH

Answer

SNMP

Answer

ICMP

Question 14

If you need to limit the number of simultaneous connections for a specific user, where is this setting configured?

Accepted Answer

Access Control Rule > Limit. Connection limits are part of the 'Limit' settings within an Access Control rule.

Answer

Platform Settings

Answer

Identity Policy

Answer

QoS Policy

Question 15

When configuring a new Access Control Policy, what is the default action for traffic that does not match any rule?

Accepted Answer

Block All. The default action for a new ACP is usually 'Block All', which ensures secure-by-default posture.

Answer

Monitor

Answer

Inspect

Answer

Allow All

Question 16

Which option is required in the SSL Policy to allow the FTD to intercept and decrypt traffic to a specific server?

Accepted Answer

SSL Decryption Rule. A Certificate object representing the CA must be trusted to allow decryption.

Answer

Access Control Rule

Answer

Custom Port Object

Answer

Prefilter Policy rule

Question 17

You need to ensure that specific traffic is always inspected by the IPS, regardless of other rules. What is the best way to ensure this?

Accepted Answer

Use an Inspect rule with IPS profile. An Access Control rule with an 'Inspect' action and an IPS policy assigned ensures this.

Answer

Use a Trust rule

Answer

Use a Monitor rule

Answer

Set as the Default Action

Question 18

Where can you see the current status of an FTD device's deployment?

Accepted Answer

Devices > Deployment. The 'Deployment' page in FMC shows the pending or successful status of policy application.

Answer

System > Updates

Answer

Objects > Deployment

Answer

Analysis > Deployment

Question 19

Which THREE items are mandatory to define when creating a new Security Zone?

Accepted Answer

Assigned Interfaces. A Zone requires a Name, a Type (Routed/Transparent), and assigned Interfaces.

Answer

MTU Size

Answer

SNMP Community

Question 20

Which THREE actions can be applied to traffic in a Prefilter rule?

Accepted Answer

Tunnel. Prefilter rules support Fastpath, Analyze, and Tunneling actions.

Answer

Block

Answer

Monitor