300-710 SNCF Configuration Practice Test 9 — 15 Questions

Question 1

You have a large number of NAT rules. How does the FTD process them?

Accepted Answer

Top-down. NAT rules are processed in a top-down order until the first match is found.

Answer

Bottom-up

Answer

Specific to General

Answer

Alphabetical

Question 2

What is the purpose of 'Network Discovery' in FMC?

Accepted Answer

To identify hosts and user activity. Network Discovery identifies hosts, applications, and operating systems on the network.

Answer

To push firmware updates

Answer

To configure routing protocols

Answer

To perform active IPS scanning

Question 3

Which tab in the Access Control Policy rule editor allows you to specify the source and destination zones?

Accepted Answer

Zones. The 'Zones' tab is where you define ingress and egress zones for the rule.

Answer

Ports

Answer

Networks

Answer

Applications

Question 4

How do you enable 'High Availability' (HA) for an FTD pair managed by FMC?

Accepted Answer

Under Devices > Device Management. HA is configured in the Device Management section by selecting two devices to pair.

Answer

Under Policies > HA

Answer

Via the System > Configuration menu

Answer

In the Access Control Policy

Question 5

When configuring a QoS policy, what happens if you exceed the 'Rate Limit' set for a traffic class?

Accepted Answer

The excess traffic is policed. Traffic exceeding the rate limit is policed (dropped or shaped).

Answer

The traffic is redirected to another interface

Answer

The traffic is logged as critical

Answer

The connection is reset

Question 6

What must be configured before an Access Control Rule can use a URL category?

Accepted Answer

URL Filtering License. The URL filtering license must be enabled/configured for the category database to be available.

Answer

Identity Policy

Answer

Prefilter Policy

Answer

QoS Policy

Question 7

What action should you take if you want to test a new Access Control Rule without impacting production traffic?

Accepted Answer

Use the 'Monitor' action. Use the 'Monitor' action first to see what traffic matches the rule without blocking it.

Answer

Delete the rule

Answer

Use the 'Block' action

Answer

Use the 'Trust' action

Question 8

When using the 'Search' feature in the Access Control Policy, which filter allows you to find all rules containing a specific network object?

Accepted Answer

Filter by Network. The rule editor allows filtering rules based on their contents like networks, zones, or applications.

Answer

Filter by Action

Answer

Filter by Name

Answer

Filter by Zone

Question 9

What is the result of using a 'Security Group' object in an Access Control rule?

Accepted Answer

Matches based on SGT. Security Group objects allow policy matching based on Cisco TrustSec tags.

Answer

Matches based on IP address

Answer

Matches based on VLAN

Answer

Matches based on Interface

Question 10

What is the purpose of an 'FQDN' object in FMC?

Accepted Answer

To define a domain name. FQDN objects are used to define network resources by domain name, which the FTD resolves.

Answer

To define a protocol port

Answer

To define a zone

Answer

To define a static IP

Question 11

How do you identify which Access Control Rule triggered a specific connection log?

Accepted Answer

Check the 'Rule Name' field in the connection event. The connection event log contains a field identifying the specific Rule Name that matched.

Answer

Check the 'Policy Name' field

Answer

Check the 'Device Name'

Answer

Check the 'Ingress Zone'

Question 12

Which tab in the FMC Object Manager allows you to manage pre-defined objects?

Accepted Answer

System Objects. FMC provides a list of pre-defined objects under the 'Network' or 'Port' categories; you can filter for 'System' objects.

Answer

User Objects

Answer

Global Objects

Answer

Custom Objects

Question 13

If you need to block a specific file type (e.g., .exe) from being downloaded, which feature must you enable in the Access Control Rule?

Accepted Answer

File Policy. File policies are associated with Access Control rules to inspect and block files.

Answer

SSL Policy

Answer

IPS Policy

Answer

QoS Policy

Question 14

When configuring an FQDN object, which THREE options are valid for the FQDN field?

Accepted Answer

Subdomain. FQDN objects can be a single domain, a wildcard domain, or a domain with specific subdomains.

Answer

IP address

Answer

Protocol name

Question 15

Which TWO items can be used to filter traffic in a QoS policy?

Accepted Answer

Port object. QoS policies use Network and Port objects to classify traffic for bandwidth management.

Answer

User Identity

Answer

License status

Answer

Device name