Halloween Special Sale 75% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sale75best

Free Cisco 300-710 Practice Exam with Questions & Answers | Set: 2

Questions 11

An engineer is reviewing a ticket that requests to allow traffic for some devices that must connect to a server over 8699/udp. The request mentions only one IP address, 172.16.18.15, but the requestor asked for the engineer to open the port for all machines that have been trying to connect to it over the last week. Which action must the engineer take to troubleshoot this issue?

Options:
A.

Use the context explorer to see the application blocks by protocol.

B.

Use the context explorer to see the destination port blocks

C.

Filter the connection events by the source port 8699/udp.

D.

Filter the connection events by the destination port 8699/udp.

Cisco 300-710 Premium Access
Questions 12

A security engineer is configuring a remote Cisco FTD that has limited resources and internet bandwidth. Which malware action and protection option should be configured to reduce the requirement for cloud lookups?

Options:
A.

Malware Cloud Lookup and dynamic analysis

B.

Block Malware action and dynamic analysis

C.

Block Malware action and local malware analysis

D.

Block File action and local malware analysis

Questions 13

The CEO ask a network administrator to present to management a dashboard that shows custom analysis tables for the top DNS queries URL category statistics, and the URL reputation statistics.

Which action must the administrator take to quickly produce this information for management?

Options:
A.

Run the Attack report and filter on DNS to show this information.

B.

Create a new dashboard and add three custom analysis widgets that specify the tables needed.

C.

Modify the Connection Events dashboard to display the information in a view for management.

D.

Copy the intrusion events dashboard tab and modify each widget to show the correct charts.

Questions 14

Which two actions can be used in an access control policy rule? (Choose two.)

Options:
A.

Block with Reset

B.

Monitor

C.

Analyze

D.

Discover

E.

Block ALL

Questions 15

An engineer is investigating connectivity problems on Cisco Firepower for a specific SGT. Which command allows the engineer to capture real packets that pass through the firewall using an SGT of 64?

Options:
A.

capture CAP type inline-tag 64 match ip any any

B.

capture CAP match 64 type inline-tag ip any any

C.

capture CAP headers-only type inline-tag 64 match ip any any

D.

capture CAP buffer 64 match ip any any

Questions 16

Refer to the exhibit.

300-710 Question 16

What is the effect of the existing Cisco FMC configuration?

Options:
A.

The remote management port for communication between the Cisco FMC and the managed device changes to port 8443.

B.

The managed device is deleted from the Cisco FMC.

C.

The SSL-encrypted communication channel between the Cisco FMC and the managed device becomes plain-text communication channel.

D.

The management connection between the Cisco FMC and the Cisco FTD is disabled.

Questions 17

An engineer must configure high availability for the Cisco Firepower devices. The current network topology does not allow for two devices to pass traffic concurrently. How must the devices be implemented in this environment?

Options:
A.

in active/active mode

B.

in a cluster span EtherChannel

C.

in active/passive mode

D.

in cluster interface mode

Questions 18

A security engineer must add a new policy to block UDP traffic to one server. The engineer adds a new object. Which action must the engineer take next to identify all the UDP ports?

Options:
A.

Define the transport protocol and the mandatory port range.

B.

Add the transport number and specify the type and code.

C.

Add the corresponding IP protocol number for UDP and TCP.

D.

Specify the transport protocol and leave the port number empty.

Questions 19

An engineer wants to connect a single IP subnet through a Cisco FTD firewall and enforce policy. There is a requirement to present the internal IP subnet to the outside as a different IP address. What must be configured to meet these requirements?

Options:
A.

Configure the downstream router to perform NAT.

B.

Configure the upstream router to perform NAT.

C.

Configure the Cisco FTD firewall in routed mode with NAT enabled.

D.

Configure the Cisco FTD firewall in transparent mode with NAT enabled.

Questions 20

An engineer is troubleshooting a device that cannot connect to a web server. The connection is initiated from the Cisco FTD inside interface and attempting to reach 10.0.1.100 over the non-standard port of 9443 The host the engineer is attempting the connection from is at the IP address of 10.20.10.20. In order to determine what is happening to the packets on the network, the engineer decides to use the FTD packet capture tool Which capture configuration should be used to gather the information needed to troubleshoot this issue?

A)

300-710 Question 20

B)

C)

300-710 Question 20

D)

Options:
A.

Option A

B.

Option B

C.

Option C

D.

Option D

Exam Code: 300-710
Certification Provider: Cisco
Exam Name: Securing Networks with Cisco Firepower (300-710 SNCF) v1.2
Last Update: Nov 3, 2026
Questions: 444

Cisco Related Exams

How to pass Cisco 300-715 - Implementing and Configuring Cisco Identity Services Engine (SISE) v1.1 (300-715 SISE) Exam
How to pass Cisco 350-701 - Implementing and Operating Cisco Security Core Technologies (SCOR 350-701 v2.0) Exam
How to pass Cisco 300-740 - Designing and Implementing Secure Cloud Access for Users and Endpoints Exam
How to pass Cisco 300-745 - Designing Cisco Security Infrastructure Exam
700-240 - Cisco Environmental Sustainability Overview(CESO)
700-550 - Cisco US Federal Authorized Partner
700-841 - Cisco IoT Advantage for System Engineers (IOTASE)
300-815 - Implementing Cisco Advanced Call Control On-Premises
500-710 - Cisco Video Infrastructure Implementation (VII)
200-301 - Implementing and Administering Cisco Solutions (200-301 CCNA) v1.1
500-442 - Administering Cisco Contact Center Enterprise (CCEA)
800-150 - Supporting Cisco Devices for Field Technicians
500-560 - Cisco Networking: On-Premise and Cloud Solutions (OCSE)
810-115 - Cisco OT Security Practitioner
300-440 - Designing and Implementing Secure Cloud Connectivity
Cisco Free Access
Get Cisco Full Access

Cisco Free Exams
Cisco Free Exams
Examstrack offers free Cisco exam materials and practice tests to aid your Cisco certification journey.