How should I use these Configuration practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

Can I practise just Configuration questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Configuration domain.

300-710 SNCF · topic practice

Configuration practice questions

The Configuration domain of 300-710 SNCF covers building and tuning policies on Cisco Firepower Management Center and FTD, including access control, prefilter, QoS, and logging. Questions present realistic FMC/FTD administration scenarios and ask you to select correct rule actions, policy settings, or parameters rather than recite theory.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Editorial oversight:Johnson Ajibi· MSc IT Security, IEEE Senior Member

20 questionsDomain: Configuration

Practice 10 questions Browse domain →

What the exam tests

What to know about Configuration

You must be able to build and interpret FMC policies: choose correct Access Control and Prefilter rule actions, configure Security Zones, set QoS policing/shaping, and enable logging options. The key is matching each rule action and parameter to the stated traffic-handling requirement.

Access Control Policy rules: actions, Security Zones, and Logging tab options (connection events, Syslog, SNMP traps)

Prefilter Policy rules: actions such as Fastpath, Block, Analyze, and their effect on tunneled or trusted traffic

QoS policy configuration on FTD: policing and shaping to enforce maximum bandwidth on an interface

Security Zone function in FMC: grouping interfaces to define traffic direction and simplify policy application

Watch out for

Common Configuration exam traps

▸Confusing Prefilter rule actions (Fastpath, Block, Analyze) with Access Control rule actions (Allow, Trust, Block, Monitor) and selecting the wrong set.
▸Assuming Security Zones are interface types or VLANs; they are logical groupings used to match source/destination in policies.
▸Mixing up policing versus shaping when the requirement is a hard maximum bandwidth limit on an interface.

Practice set

Configuration questions

20 questions · select your answer, then reveal the explanation

Question 1easymultiple choice

Read the full Configuration explanation →

An administrator is configuring a network object in the FMC to represent a range of IP addresses from 192.168.1.100 to 192.168.1.200. Which object type should be created?

Trap 1: FQDN

An FQDN object represents a Fully Qualified Domain Name resolved via DNS.

Trap 2: Network

A Network object represents an entire subnet using CIDR notation.

Trap 3: Host

A Host object represents a single IP address.

Configuration practice questions

What to know about Configuration

Common Configuration exam traps

Configuration questions

An administrator is configuring a network object in the FMC to represent a range of IP addresses from 192.168.1.100 to 192.168.1.200. Which object type should be created?

An administrator needs to configure manual NAT on an FTD device to translate both the source IP and source port of outbound packets originating from 192.168.2.50 to a specific public IP 198.51.100.10 and port 50000. Which manual NAT rule element achieves this?

An engineer needs to prioritize voice traffic (DSCP EF) over a constrained WAN interface on an FTD device. Where must the QoS policy be configured and applied?

An administrator wants to decrypt inbound HTTPS traffic destined for a public web server behind a Firepower Threat Defense device. Which type of SSL/TLS decryption policy must be configured on the FMC?

An administrator is configuring manual NAT and needs to ensure that the original source port is preserved during translation without port overloading. Which feature should be selected in the manual NAT rule?

An administrator needs to configure an identity policy to authenticate users using an external RADIUS server via Passive Authentication. Which mechanism accomplishes passive user identification?

An administrator needs to create a Geolocation object in the FMC to block traffic originating from a specific country. Where is this object used?

An administrator is troubleshooting an Access Control Policy where multiple rules could potentially match a specific packet. In what order does the FMC evaluate rules within an Access Control Policy?

An administrator needs to configure Active Authentication using a captive portal on an FTD device. Which firewall feature must be properly configured and running to present the authentication prompt to users?

Which THREE actions can be assigned to an individual rule within an Access Control Policy on the FMC? (Choose three)

An administrator is configuring an SSL/TLS Decryption Policy. Which TWO decryption actions are available in FMC SSL rules? (Choose two)

An administrator is configuring Identity Policies on the FMC. Which TWO identity sources are supported for user mapping and authentication? (Choose two)

An administrator wants to configure QoS on an FMC-managed FTD device. Which TWO components are required to successfully implement a QoS policy? (Choose two)

An administrator is managing object configurations on the FMC. Which TWO of the following are valid object types that can be created under Object Management? (Choose two)

An administrator is configuring Security Intelligence in FMC. Which TWO types of objects can be added to Security Intelligence blacklists or whitelists? (Choose two)

An administrator is configuring a new Access Control Policy on the FMC and needs to ensure that HTTP traffic matching a specific URL category is blocked before security inspection to optimize performance. Which policy type should be configured?

A network engineer is deploying a Firepower Threat Defense (FTD) device and must configure NAT to translate an internal server IP of 10.10.10.50 to a public IP of 203.0.113.50 while preserving the original source port for inbound traffic. Which NAT type accomplishes this?

An organization requires that Quality of Service (QoS) be enforced on an FTD interface to limit outbound traffic for a specific guest network object to 2 Mbps. Where within the FMC interface is this QoS policy applied?

An administrator needs to create a reusable network object in the FMC representing a range of IP addresses from 192.168.1.100 to 192.168.1.200. Which object type should be created under Object Management?

Track your progress over time

Start a Configuration only practice session

Related 300-710 SNCF topic practice pages

Configuration practice questions

Deployment practice questions

Management And Troubleshooting practice questions

Integration practice questions

300-710 SNCF fundamentals practice questions

300-710 SNCF scenario practice questions

300-710 SNCF troubleshooting practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid