Free Cisco 300-710 Practice Exam with Questions & Answers | Set: 9

When an FTD device that is managed by FDM is registered to FMC, the existing configuration is automatically converted and imported into FMC. The FMC then pushes the configuration back to the device. This process preserves most of the FDM configuration, except for some features that are not supported by FMC, such as VPN wizards and certificates.

When creating a new intrusion rule in a Cisco Secure Firewall Threat Defense (FTD) device, the keyword type " metadata " must be used to add a line that identifies the author of the rule and the date it was created. The metadata keyword is used to store additional information about the rule, such as authorship and creation date.

Steps:

In FMC, navigate toPolicies > Intrusion > Rules.

Create a new rule or edit an existing one.

Use the " metadata " keyword to add information about the author and date.

Example:

metadata: created_at 2023-06-15, author " John Doe " ;

By using the metadata keyword, you ensure that the rule contains relevant information for tracking its creation and authorship, which is essential for maintaining rule documentation and accountability.

Standard reports from Cisco Secure Firewall Management Center can be downloaded in CSV (Comma-Separated Values) format. This format is widely used for data exchange and can be opened in various applications such as Microsoft Excel.

Steps to download reports:

Navigate toReports > Report Designerin the FMC.

Select or create the report you wish to download.

Choose the CSV format option when exporting the report.

This allows the network engineer to analyze and manipulate the report data easily.

To support more than two interfaces per context and enable NAT configurations, the firewall must operate in routed mode. Since the firewall was previously in transparent mode, the network engineer needs to change it to routed mode.

Steps:

Access the CLI of the Secure FTD device.

Run the commandconfigure firewall routedto switch the firewall from transparent mode to routed mode.

Reregister the FTD device with the FMC by running theconfigure manager add < FMC_IP > < Registration_Key > command from the FTD device CLI.

This will ensure that the firewall can support the required NAT configurations and more than two interfaces per context.

Integrated routing and bridging (IRB) is a feature that allows you to route between different bridge groups on a Cisco FTD device. A bridge group is a logical interface that acts as a container for one or more physical or logical interfaces that belong to the same layer 2 broadcast domain. You can assign an IP address to a bridge group interface (BVI) and enable routing protocols on it, just like a regular routed interface. However, when you run a dynamic routing protocol on a Cisco FTD device in IRB mode, you can only use nonbridge interfaces as routing peers. You cannot use bridge group interfaces or bridge group member interfaces as routing peers2. This is because the routing protocol packets are sent and received on the nonbridge interfaces, and the bridge group interfaces are used only for forwarding data traffic3.