300-710 SNCF Management And Troubleshooting Practice Test 3 — 15 Questions

Question 1

An administrator is troubleshooting connectivity issues to the FMC web interface (HTTPS). Which TWO commands or diagnostic checks can be performed on the FMC CLI to verify web server responsiveness and port status? (Choose two)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use 'system support web-restart' or check the status of the web server daemon (such as nginx/lighttpd).. Option A is correct because on the FMC CLI the administrator can restart or check the web server service (the FMC web interface is served by a web daemon such as nginx/lighttpd) using the 'system support web-restart' command, which directly verifies and restores web server responsiveness. Option D is correct because running 'ss -tuln' or 'netstat -an | grep 443' shows whether a process is listening on TCP port 443, confirming the HTTPS web server is bound and accepting connections. Option B is incorrect because 'debug https-server' is not a valid FMC CLI/expert-mode diagnostic command for the web interface. Option C is incorrect because 'ping gateway-web' is not a real FMC command and ICMP ping would not test HTTP/HTTPS routing or port status. Option E is incorrect because 'system support reset-ip' is not a valid command for fixing web access and would not verify web server responsiveness or port 443 status.

Answer

Run 'debug https-server' from expert mode.

Answer

Execute 'ping gateway-web' to test HTTP routing.

Answer

Use 'system support reset-ip' to fix web access.

Question 2

An engineer is troubleshooting a high availability (HA) configuration failure between two FTD devices managed by FMC. Which THREE prerequisites must be verified before pairing two FTD devices into an HA pair? (Choose three)

Accepted Answer

Both FTD devices must have identical interface configurations, counts, and security zone assignments.. FTD HA pairing requires identical hardware models or model families, identical interface configurations and naming, and identical software versions.

Answer

Both FTD devices must be configured with different management IP addresses on the same subnet.

Answer

Both FTD devices must have separate, independent Access Control Policies assigned.

Question 3

An administrator is troubleshooting a packet drop issue on a Firepower Threat Defense (FTD) device managed by Firepower Management Center (FMC). The administrator wants to inspect real-time packets entering and leaving specific interfaces including layer 2/3 headers and ASP drop details. Which built-in FMC feature should the administrator use?

Accepted Answer

Devices > Device Management > Advanced > Packet Capture. The built-in FMC feature for capturing live packets on FTD interfaces is found under Devices > Device Management > Advanced > Packet Capture. This tool allows the administrator to define capture parameters per interface, view layer 2/3 headers, and inspect ASP drop details in real time. It is the native FMC GUI equivalent of the FTD CLI capture commands and is designed specifically for troubleshooting packet drops.

Answer

Analysis > Tap > Real-Time Capture

Answer

Policies > Access Control > Advanced > Live Trace

Answer

System > Monitoring > Packet Capture

Question 4

An administrator is preparing to upgrade an FTD managed device using the FMC. Before initiating the upgrade, which FMC utility should be run to check for compatibility, disk space, and potential configuration blocks?

Accepted Answer

System > Updates > Check Compatibility. Before upgrading an FTD managed device via FMC, the administrator should run the Pre-Check utility, accessible from Device > Action > Pre-Check. This utility checks for compatibility, disk space, and potential configuration blocks that could prevent a successful upgrade. It provides a report that helps the administrator address issues before initiating the upgrade.

Answer

Policy > Access Control > Verify

Answer

Health Monitor

Answer

Device > Action > Pre-Check

Question 5

An administrator wants to configure automated backup generation on the FMC and ensure that backup archives are securely offloaded to a remote server. Where is this configured in the FMC GUI?

Accepted Answer

System > Tools > Backup / Restore. Automated backup generation and secure offload to a remote server on the FMC is configured under System > Tools > Backup / Restore. This section allows scheduling backups and specifying remote destinations such as SCP, SFTP, or FTP servers for secure offloading.

Answer

Administration > Local Storage > Backup

Answer

Devices > Device Management > Tools > Backup

Answer

System > Configuration > Backup

Question 6

An administrator is preparing to troubleshoot a complex routing and NAT issue on an FTD device using packet tracer. Which TWO statements regarding the FTD packet tracer tool are correct? (Choose two.)

Accepted Answer

Packet tracer can be executed from both the FTD CLI and the FMC GUI under Device > Packet Trace.. Option B is correct because the FTD packet tracer is available both from the FTD CLI (using the system support firewall-engine-debug or the packet-tracer command in the diagnostic CLI) and from the FMC GUI under Device > Packet Trace, allowing administrators to run traces from either management interface. Option D is correct because packet tracer is a simulation tool that injects a synthetic packet and walks it through the security engine, displaying the results of each stage including access control policy, NAT translation, and route lookup, which is exactly what is needed to troubleshoot complex routing and NAT issues. Option A is incorrect because packet tracer does not capture live traffic on the wire; that function belongs to packet capture tools such as the FTD capture command or FMC packet capture. Option C is incorrect because packet tracer does not depend on Smart Licensing being out of compliance; licensing state is unrelated to its operation. Option E is incorrect because packet tracer is non-disruptive and does not modify the firewall state table or create any permanent entries for return traffic.

Answer

Packet tracer captures live packets traversing the wire in real-time.

Answer

Packet tracer requires Smart Licensing to be in an out-of-compliance state to function.

Answer

Packet tracer permanently alters the firewall state table to allow future return traffic.

Question 7

When troubleshooting FTD high memory or CPU usage, an administrator can gather diagnostic data directly from the appliance. Which THREE commands can be executed on the FTD CLI to analyze resource utilization? (Choose three.)

Accepted Answer

show memory. Option B, 'show memory', is correct because it is a valid FTD CLI command that displays current memory allocation and usage statistics, letting the administrator see how much memory is consumed by processes on the appliance. Option D, 'show cpu detail', is correct because it provides a detailed per-process breakdown of CPU utilization, which is essential for identifying which process is driving high CPU usage. Option E, 'top', is correct because the FTD CLI includes a top utility that shows a live, sorted view of processes by CPU and memory consumption, useful for real-time resource troubleshooting. Option A, 'show running-config memory', is not a valid FTD command since 'show running-config' does not take a 'memory' keyword, and Option C, 'debug memory leaks', is not a real command and enabling debug-level memory tracing is not the intended way to analyze resource utilization.

Answer

show running-config memory

Answer

debug memory leaks

Question 8

An administrator notices that the FMC dashboard indicates a yellow health status for an FTD device. Where should the administrator navigate to identify the specific process or service that is failing?

Accepted Answer

System > Health > Monitor. The FMC health monitor is located under System > Health > Monitor. This section provides a detailed view of device health, including the status of individual processes and services. When a device shows a yellow health status, navigating here allows the administrator to drill down into the specific failing process.

Answer

Devices > Troubleshooting > Health

Answer

Devices > Device Management > Health

Answer

Analysis > Status > Device

Answer

System > Tools > Troubleshooting

Question 9

You are troubleshooting a packet drop issue. You initiate a capture on the FTD using the capture command. Which capture keyword must be used to ensure the capture includes the FTD's internal backplane traffic between interfaces?

Accepted Answer

capture trace. The 'trace' keyword in the FTD capture command allows the administrator to see the packet processing path through the inspection engine.

Answer

capture inspect

Answer

capture buffer

Answer

capture inline

Answer

capture detail

Question 10

What is the recommended procedure for performing a major software upgrade on an FTD HA pair managed by an FMC to ensure zero downtime?

Accepted Answer

Upload the image to the FMC and select the HA pair for an automated rolling upgrade.. The FMC supports an automated rolling upgrade for FTD HA pairs: the image is uploaded to the FMC, the HA pair is selected, and the FMC upgrades the standby unit first, fails over, then upgrades the former active unit — preserving traffic flow. This is the Cisco-documented zero-downtime method for HA pairs managed by FMC.

Answer

Shut down the standby unit and upgrade the primary only.

Answer

Break the HA pair, upgrade units individually, and recreate the cluster.

Answer

Use the local CLI 'system install' command on both units.

Answer

Upgrade both units simultaneously via the CLI to save time.

Question 11

An FTD device is failing to register with the FMC. The administrator confirms connectivity via ping. Which CLI command should the administrator run on the FTD to verify the registration status and the shared secret handshake?

Accepted Answer

show manager. The command 'show manager' on the FTD CLI displays the registration status with the FMC, including the shared secret handshake and connection state. It is the correct command to verify if the FTD is successfully registered.

Answer

show registration status

Answer

show fmc connection

Answer

show interface management

Answer

show network manager

Question 12

You are troubleshooting high CPU utilization on an FTD device. Which tool should you use to identify which specific process (e.g., snort) is consuming the most resources?

Accepted Answer

show processes cpu-usage. The command 'show processes cpu-usage' on FTD (which is Linux-based) displays CPU utilization per process, allowing you to identify which process, such as snort, is consuming the most resources. It provides a sorted list of processes with their CPU usage, making it ideal for troubleshooting high CPU.

Answer

show hardware utilization

Answer

show system resources

Answer

show snort stats

Answer

top

Question 13

You are restoring an FMC backup to a new appliance. Which of the following conditions must be met for a successful restore?

Accepted Answer

The target FMC must be running the exact same version as the backup.. The FMC backup and restore process requires that the target FMC appliance runs the exact same software version as the source appliance that created the backup. This is because the backup includes the full configuration database and system files, which are version-specific; restoring to a different version can cause schema mismatches, corruption, or failure. Cisco documentation explicitly states that the restore must be to the same model and same version.

Answer

The target FMC must be a different model.

Answer

The target FMC must have a lower software version.

Answer

You must re-license the unit before the restore starts.

Answer

All FTD devices must be disconnected before restore.

Question 14

Which tool in the FMC allows you to view the real-time flow of packets being processed by the Snort engine for troubleshooting purposes?

Accepted Answer

Packet Tracer. FMC's Packet Tracer tool allows an administrator to simulate a packet's path through the FTD policy and Snort inspection engine, showing which access control rule, prefilter, and inspection policy would apply. It provides a real-time view of how the Snort engine would process the flow for troubleshooting.

Answer

Event Viewer

Answer

Health Monitor

Answer

Connection Events

Answer

Traffic Logger

Question 15

When performing a packet capture on an FTD device, how can you filter the traffic to only capture traffic from a specific source IP address?

Accepted Answer

capture cap1 interface outside host 192.168.1.1. The correct syntax to filter a packet capture on FTD for a specific source IP is 'capture interface host '. This uses the host keyword to match a single IP address, and the interface keyword to specify the capture interface.

Answer

capture cap1 ip 192.168.1.1

Answer

capture cap1 match 192.168.1.1

Answer

capture cap1 filter src 192.168.1.1

Answer

capture cap1 interface outside address 192.168.1.1