300-710 SNCF Multiple Select — 60 Questions

Question 1

An administrator is configuring a Manual NAT rule in the FMC for an internal server that needs to be accessed from the outside zone. The internal IP is 192.168.1.50, and it must be translated to a public IP 203.0.113.10. Which TWO configuration parameters must be specified when defining this Manual NAT rule? (Choose two)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Original Source. Manual NAT rules require defining the Source Interface (original source zone/interface), Destination Interface (translated destination zone/interface), Original Source IP, and Translated Source IP.

Answer

Interface PAT (PAT Pool)

Answer

ARP Inspection Profile

Answer

DNS Resolution Option

Question 2

An administrator is setting up a new Cisco Firepower Threat Defense device and needs to configure platform-level parameters using FMC Platform Settings. Which TWO features can be configured via Platform Settings? (Choose two)

Accepted Answer

SNMP parameters. Platform Settings manage device-level settings such as Syslog/logging configuration, SNMP, Time Synchronization (NTP), and Banner settings. Access Control Policies and NAT are configured elsewhere.

Answer

SSL Decryption Certificate assignment

Answer

Network Address Translation (NAT)

Answer

Access Control Policy rules

Question 3

Which THREE settings can be configured within a Prefilter Policy on the FMC? (Choose three)

Accepted Answer

FastPath action to bypass Snort inspection. Prefilter policies support FastPath, Tunnel rules, and Default Actions (Analyze or FastPath).

Answer

Intrusion Policy signature tuning

Answer

Security Intelligence block lists

Question 4

Which THREE components of an Access Control rule can be used to identify traffic as 'Application' based?

Accepted Answer

Application Category. Applications are identified by the App-ID engine, which uses signatures, categories, and tags.

Answer

Device Type

Answer

OS Version

Question 5

An administrator is configuring Security Intelligence in FMC. Which TWO types of objects can be added to Security Intelligence blacklists or whitelists? (Choose two)

Accepted Answer

URL objects. Security Intelligence supports IP address objects/networks and URL objects/feeds.

Answer

Intrusion policy objects

Answer

Security Zone objects

Answer

Application filter objects

Question 6

Which THREE criteria can be used to match traffic within an Access Control rule on the FMC? (Choose three)

Accepted Answer

URL Categories. Access Control rules support matching based on Networks, Ports, Applications, URL categories, Users, and Zones.

Answer

Intrusion Policy Signatures

Answer

Device Platform Settings

Question 7

An administrator is configuring manual NAT on an FTD device managed by FMC. Which TWO parameters must be defined when creating a manual NAT rule? (Choose two)

Accepted Answer

Original Source. Manual NAT rules require defining the NAT type (Static or Dynamic) and the Original Source (along with other matching parameters like interfaces or destination).

Answer

Prefilter FastPath action

Answer

Security Intelligence Whitelist

Answer

Snort Inspection Engine Mode

Question 8

Which THREE actions can be assigned to an individual rule within an Access Control Policy on the FMC? (Choose three)

Accepted Answer

Allow. Access Control rules support actions such as Allow, Block, Interactive Block, Trust, and Monitor.

Answer

Decrypt

Answer

FastPath

Question 9

An administrator is planning an Active/Standby High Availability deployment for two Cisco Secure Firewall Threat Defense devices managed by FMC. Which THREE prerequisites must be satisfied before configuring the HA pair? (Choose three)

Accepted Answer

A dedicated link must be available to serve as the stateful failover control and health monitoring link.. HA deployment requires identical hardware models, matching major/minor FTD software versions, and dedicated physical or logical links for stateful failover control.

Answer

The secondary unit must have a higher management IP address than the primary unit.

Answer

Both firewalls must be configured in transparent mode; routed mode is unsupported in HA.

Question 10

An engineer is designing a high-availability architecture utilizing Equal-Cost Multi-Path (ECMP) routing with Cisco Secure Firewall Threat Defense units. Which THREE characteristics or limitations apply to ECMP on FTD? (Choose three)

Accepted Answer

ECMP distributes traffic across multiple equal-cost next-hop routes to optimize bandwidth utilization and path redundancy.. ECMP on FTD balances traffic across multiple paths, requires dynamic routing protocols like OSPF/BGP or static routes, and hashes flows based on packet headers.

Answer

ECMP is restricted exclusively to transparent firewall deployments and cannot be used in routed mode.

Answer

ECMP automatically synchronizes state tables between independent firewall appliances without requiring an HA control link.

Question 11

An administrator is planning the deployment of Cisco Secure Firewall Virtual in a public cloud environment (AWS or Azure). Which TWO deployment practices are recommended for ensuring high availability and performance? (Choose two)

Accepted Answer

Deploy multiple virtual network interfaces (NICs) to separate management, internal, and external traffic paths.. Cloud deployments require proper instance sizing, multiple NIC configurations for separating management and data planes, and cloud-native HA mechanisms.

Answer

Disable Smart Licensing to avoid cloud internet egress fees.

Answer

Use physical serial console cables attached to the hypervisor for initial configuration.

Answer

Rely solely on single-NIC deployments with VLAN subinterfaces trunking all cloud traffic.

Question 12

An administrator needs to define network objects in the FMC Object Management menu. Which THREE object types are natively supported for network definition? (Choose three)

Accepted Answer

Host Object. FMC supports Host, Range, Network (subnet), FQDN, and Network Group objects for network definitions.

Answer

Port Object

Answer

Application Filter Object

Question 13

Which TWO types of objects can be created in the FMC Object Manager?

Accepted Answer

Network. Network and Port objects are standard types in FMC.

Answer

License

Answer

System Health

Answer

Dashboard

Question 14

An administrator is configuring Security Intelligence feeds on the FMC. Which TWO types of objects or feeds can be used to populate Security Intelligence blacklists? (Choose two)

Accepted Answer

Custom Network/IP Lists (Objects). Security Intelligence supports custom network/IP lists and Cisco provided dynamic feeds (like reputation feeds for URLs and IPs).

Answer

Local user identity realm database

Answer

Prefilter fast-path exclusion rules

Answer

QoS class map profile objects

Question 15

An administrator is configuring interface-level QoS on an FTD device. Which THREE parameters or features can be configured within an FTD QoS policy? (Choose three)

Accepted Answer

DSCP Marking. Qos policies on FTD support rate limiting, traffic shaping, priority queuing, and marking DSCP values.

Answer

Active Directory user group mapping

Answer

Automatic IP address translation (NAT mapping)

Question 16

Which TWO items must be defined to create a fully functional Network Object group in FMC?

Accepted Answer

Member Objects. A group needs a name and at least one member (object) assigned to it.

Answer

Object Description

Answer

SNMP Traps

Answer

Routing Table

Question 17

When configuring a NAT rule, which THREE options are valid 'Type' selections within the NAT Rule editor?

Accepted Answer

Static. Static, Dynamic, and Identity are valid NAT types in FTD/FMC.

Answer

Virtual

Answer

Transparent

Question 18

An engineer is troubleshooting a Cisco Secure Firewall Threat Defense clustering deployment where configuration synchronization between the control node and a data node has failed. Which THREE diagnostic steps or log sources should the engineer check? (Choose three)

Accepted Answer

Execute the 'show cluster info' and 'show cluster state' commands on the firewall CLI to verify node membership and sync status.. Troubleshooting cluster sync issues involves examining cluster health status via CLI commands (e.g., 'show cluster info'), reviewing FMC deployment history logs, and verifying Cluster Control Link connectivity.

Answer

Check the BGP routing table on the core switch for missing Autonomous System path attributes.

Answer

Review the VMware vCenter datastore utilization for disk space errors.

Question 19

Which THREE actions can be performed by an SSL Decryption Policy?

Accepted Answer

Do Not Decrypt. SSL policy actions include Decrypt, Do Not Decrypt, and Monitor.

Answer

Redirect

Answer

Block

Question 20

Which TWO protocols are commonly managed via Port objects in FMC?

Accepted Answer

UDP. TCP and UDP are the primary protocols managed via port objects.

Answer

ARP

Answer

IGMP

Answer

ICMP