How many Select Two (Multi-Select) Questions questions are on this page?

This page has 20 Select Two (Multi-Select) Questions scenario questions for the 300-710 SNCF exam, each with detailed explanations and wrong-answer analysis.

How should I approach 300-710 SNCF scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to Cisco Securing Networks with Cisco Firewalls (300-710 SNCF, CCNP Security) (300-710 SNCF) questions

Scenario-based practice

Select Two (Multi-Select) Questions

Practise Cisco Securing Networks with Cisco Firewalls (300-710 SNCF, CCNP Security) (300-710 SNCF) practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

300-710 SNCF

exam code

Cisco

vendor

Scenario guide

How to approach select two (multi-select) questions

Multi-select questions tell you to 'Choose TWO' or 'Choose THREE'. Getting partial credit is not a thing — you must select all correct answers with no incorrect ones. The stem always states how many to choose, so trust it. These questions require precision, not best-guess elimination.

Quick answer

Select Two (Multi-Select) Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1hardmulti select

Read the full NAT/PAT explanation →

An administrator is configuring a Manual NAT rule in the FMC for an internal server that needs to be accessed from the outside zone. The internal IP is 192.168.1.50, and it must be translated to a public IP 203.0.113.10. Which TWO configuration parameters must be specified when defining this Manual NAT rule? (Choose two)

A
Interface PAT (PAT Pool)
Why wrong: PAT pool is used for many-to-one port address translation, not a static 1-to-1 IP mapping.
B
Original Source
The Original Source must be defined as the internal server object (192.168.1.50).
C
ARP Inspection Profile
Why wrong: ARP inspection is a security feature unrelated to basic Manual NAT configuration.
D
Translated Source
The Translated Source must be defined as the public IP object or address (203.0.113.10).
E
DNS Resolution Option
Why wrong: DNS resolution is used forFQDN-based NAT objects, not static IP manual NAT.

Select Two (Multi-Select) Questions

How to approach select two (multi-select) questions

Quick answer

Related 300-710 SNCF topic practice pages

Configuration practice questions

Deployment practice questions

Management And Troubleshooting practice questions

Integration practice questions

300-710 SNCF fundamentals practice questions

300-710 SNCF scenario practice questions

300-710 SNCF troubleshooting practice questions

Practice scenarios

An administrator is setting up a new Cisco Firepower Threat Defense device and needs to configure platform-level parameters using FMC Platform Settings. Which TWO features can be configured via Platform Settings? (Choose two)

Which THREE settings can be configured within a Prefilter Policy on the FMC? (Choose three)

Which THREE components of an Access Control rule can be used to identify traffic as 'Application' based?

An administrator is configuring Security Intelligence in FMC. Which TWO types of objects can be added to Security Intelligence blacklists or whitelists? (Choose two)

Which THREE criteria can be used to match traffic within an Access Control rule on the FMC? (Choose three)

An administrator is configuring manual NAT on an FTD device managed by FMC. Which TWO parameters must be defined when creating a manual NAT rule? (Choose two)

Which THREE actions can be assigned to an individual rule within an Access Control Policy on the FMC? (Choose three)

An administrator is planning an Active/Standby High Availability deployment for two Cisco Secure Firewall Threat Defense devices managed by FMC. Which THREE prerequisites must be satisfied before configuring the HA pair? (Choose three)

An engineer is designing a high-availability architecture utilizing Equal-Cost Multi-Path (ECMP) routing with Cisco Secure Firewall Threat Defense units. Which THREE characteristics or limitations apply to ECMP on FTD? (Choose three)

An administrator is planning the deployment of Cisco Secure Firewall Virtual in a public cloud environment (AWS or Azure). Which TWO deployment practices are recommended for ensuring high availability and performance? (Choose two)

An administrator needs to define network objects in the FMC Object Management menu. Which THREE object types are natively supported for network definition? (Choose three)

Which TWO types of objects can be created in the FMC Object Manager?

An administrator is configuring Security Intelligence feeds on the FMC. Which TWO types of objects or feeds can be used to populate Security Intelligence blacklists? (Choose two)

An administrator is configuring interface-level QoS on an FTD device. Which THREE parameters or features can be configured within an FTD QoS policy? (Choose three)

Which TWO items must be defined to create a fully functional Network Object group in FMC?

When configuring a NAT rule, which THREE options are valid 'Type' selections within the NAT Rule editor?

An engineer is troubleshooting a Cisco Secure Firewall Threat Defense clustering deployment where configuration synchronization between the control node and a data node has failed. Which THREE diagnostic steps or log sources should the engineer check? (Choose three)

Which THREE actions can be performed by an SSL Decryption Policy?

Which TWO protocols are commonly managed via Port objects in FMC?