300-710 試験問題を無料オンラインアクセス

A security engineer must add a new policy to block UDP traffic to one server. The engineer adds a new object. Which action must the engineer take next to identify all the UDP ports?

• A.Add the transport number and specify the type and code.
• B.Define the transport protocol and the mandatory port range.
• C.Add the corresponding IP protocol number for UDP and TCP.
• D.Specify the transport protocol and leave the port number empty.

On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?

• A.transparent inline mode
• B.TAP mode
• C.propagate link state
• D.strict TCP enforcement

What is the maximum bit size that Cisco FMC supports for HTTPS certificates?

• A.1024
• B.8192
• C.2048
• D.4096

An organization has a Cisco IPS running in inline mode and is inspecting traffic for malicious activity. When traffic is received by the Cisco IRS, if it is not dropped, how does the traffic get to its destination?

• A.It is retransmitted from the Cisco IPS inline set.
• B.The packets are duplicated and a copy is sent to the destination.
• C.It is transmitted out of the Cisco IPS outside interface.
• D.It is routed back to the Cisco ASA interfaces for transmission.

After a network security breach, an engineer must strengthen the security of the corporate network. Upper management must be regularly updated with a high-level overview of any occurring network threats. Which access must the engineer provide upper management to view the required data from Cisco Secure Firewall Management Center?

• A.Analysis > Status with a sliding time window of one day
• B.Reports with a daily recurring task that generates based on the network risk report template
• C.Events by priority and classification and set a sliding time window of one day
• D.Security Intelligence Statistics dashboard set to Show the Last option to one day