300-710 試験問題を無料オンラインアクセス

A VPN user is unable to conned lo web resources behind the Cisco FTD device terminating the connection.
While troubleshooting, the network administrator determines that the DNS responses are not getting through the Cisco FTD What must be done to address this issue while still utilizing Snort IPS rules?

• A.Uncheck the "Drop when Inline" box in the intrusion policy to allow the traffic.
• B.Decrypt the packet after the VPN flow so the DNS queries are not inspected
• C.Modify the Snort rules to allow legitimate DNS traffic to the VPN users.
• D.Disable the intrusion rule threshes to optimize the Snort processing.

A company is deploying intrusion protection on multiple Cisco FTD appliances managed by Cisco FMC.
Which system-provided policy must be selected if speed and detection are priorities?

• A.Maximum Detection
• B.Balanced Security and Connectivity
• C.Security Over Connectivity
• D.Connectivity Over Security

A cisco Secure firewall Threat Defence device is configured in inline IPS mode to inspect all traffic that passes through the interfaces in the inline set. Which setting in the inline set configuration must be connected to allow traffic to pass through uninterrupted when VDB updates are being applied?

• A.Short Fall Open
• B.Strict TCP Enforcement
• C.Propagate Link State
• D.Tap Mode

An engineer is using the configure manager add <FMC IP> Cisc402098527 command to add a new Cisco FTD device to the Cisco FMC; however, the device is not being added. Why Is this occurring?

• A.DONOTRESOLVE must be added to the command
• B.The NAT ID is required since the Cisco FMC is behind a NAT device.
• C.The IP address used should be that of the Cisco FTD. not the Cisco FMC.
• D.The registration key is missing from the command

An engineer is working on a LAN switch and has noticed that its network connection to the mime Cisco IPS has gone down Upon troubleshooting it is determined that the switch is working as expected What must have been implemented for this failure to occur?

• A.The Cisco IPS has been configured to be in fail-open mode
• B.The Cisco IPS is configured in detection mode
• C.Link-state propagation is enabled
• D.The upstream router has a misconfigured routing protocol