Duration: 90 minutes
Languages: English
Exam overview
This exam tests your knowledge of Cisco Firepower® Threat Defense and Firepower® 7000 and 8000 Series virtual appliances, including:
Policy configurations
Integrations
Deployments
Management and troubleshooting
Associated certifications:
CCNP Security
Cisco Certified Specialist – Network Security Firepower
Exam Description:
Securing Networks with Cisco Firepower v1.0 (SNCF 300-710) is a 90-minute exam associated with the CCNP Security Certification. This exam tests a candidate’s knowledge of Cisco Firepower® Threat Defense and Firepower®, including policy configurations, integrations, deployments, management and troubleshooting. These courses, Securing Networks with Cisco Firepower, and Securing Networks with Cisco Firepower Next-Generation Intrusion Prevention System helps candidates prepare for this exam.
The following topics are general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. To better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.
30% 1.0 Deployment
1.1 Implement NGFW modes
1.1.a Routed mode
1.1.b Transparent mode
1.2 Implement NGIPS modes
1.2.a Passive
1.2.b Inline
1.3 Implement high availability options
1.3.a Link redundancy
1.3.b Active/standby failover
1.3.c Multi-instance
1.4 Describe IRB configurations
30% 2.0 Configuration
2.1 Configure system settings in Cisco Firepower Management Center
2.2 Configure these policies in Cisco Firepower Management Center
2.2.a Access control
2.2.b Intrusion
2.2.c Malware and file
2.2.d DNS
2.2.e Identity
2.2.f SSL
2.2.g Prefilter
2.3 Configure these features using Cisco Firepower Management Center
2.3.a Network discovery
2.3.b Application detectors (Open AppID)
2019 Cisco Systems, Inc. This document is Cisco Public. Page 2
2.3.c Correlation
2.3.d Actions
2.4 Configure objects using Firepower Management Center
2.4.a Object Management
2.4.b Intrusion Rules
2.5 Configure devices using Firepower Management Center
2.5.a Device Management
2.5.b NAT
2.5.c VPN
2.5.d QoS
2.5.e Platform Settings
2.5.f Certificates
25% 3.0 Management and Troubleshooting
3.1 Troubleshoot with FMC CLI and GUI
3.2 Configure dashboards and reporting in FMC
3.3 Troubleshoot using packet capture procedures
3.4 Analyze risk and standard reports
15% 4.0 Integration
4.1 Configure Cisco AMP for Networks in Firepower Management Center
4.2 Configure Cisco AMP for Endpoints in Firepower Management Center
4.3 Implement Threat Intelligence Director for third-party security intelligence feeds
4.4 Describe using Cisco Threat Response for security investigations
4.5 Describe Cisco FMC PxGrid Integration with Cisco Identify Services Engine (ISE)
4.6 Describe Rapid Threat Containment (RTC) functionality within Firepower Management Center
QUESTION 1
What is a result of enabling Cisco FTD clustering?
A. For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections.
B. Integrated Routing and Bridging is supported on the master unit.
C. Site-to-site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails.
D. All Firepower appliances support Cisco FTD clustering.
Answer: C
QUESTION 2
Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)
A. The units must be the same version
B. Both devices can be part of a different group that must be in the same domain when configured within the FMC.
C. The units must be different models if they are part of the same series.
D. The units must be configured only for firewall routed mode.
E. The units must be the same model.
Answer: A,E
QUESTION 3
On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?
A. transparent inline mode
B. TAP mode
C. strict TCP enforcement
D. propagate link state
Answer: D
Make The Best Choice Chose – Joogate
Make yourself more valuable in today’s competitive computer industry Joogate’s preparation material includes the most excellent features, prepared by the same dedicated experts who have come together to offer an integrated solution. We provide the most excellent and simple method to pass your Cisco Cisco Certified Specialist – Network Security Firepower 300-710 exam on the first attempt .
will prepare you for your exam effectively. 300-710 Study Guide. Your exam will download as a single 300-710 PDF or complete 300-710 preparation material as well as over +4000 other technical exam PDF and study material downloads. Forget buying your prep materials separately at three time the price of our – skip the 300-710 audio exams and select the one package that gives it all to you at your discretion: 300-710 Study Materials featuring the study material.
Joogate 300-710 Exam Prepration Tools
Joogate Cisco Cisco Certified Specialist – Network Security Firepower preparation begins and ends with your accomplishing this credential goal. Although you will take each Cisco Cisco Certified Specialist – Network Security Firepower online test one at a time – each one builds upon the previous. Remember that each Cisco Cisco Certified Specialist – Network Security Firepower exam paper is built from a common certification foundation.
300-710 Exam preparation materials
Beyond knowing the answer, and actually understanding the 300-710 test questions puts you one step ahead of the test. Completely understanding a concept and reasoning behind how something works, makes your task second nature. Your 300-710 quiz will melt in your hands if you know the logic behind the concepts. Any legitimate Cisco Cisco Certified Specialist – Network Security Firepower prep materials should enforce this style of learning – but you will be hard pressed to find more than a Cisco Cisco Certified Specialist – Network Security Firepower practice test anywhere other than Joogate.
300-710 Exam Questions and Answers with Explanation
This is where your Cisco Cisco Certified Specialist – Network Security Firepower 300-710 exam prep really takes off, in the testing your knowledge and ability to quickly come up with answers in the 300-710 online tests. Using Cisco Certified Specialist – Network Security Firepower 300-710 practice exams is an excellent way to increase response time and queue certain answers to common issues.
300-710 Exam Study Guides
All Cisco Cisco Certified Specialist – Network Security Firepower online tests begin somewhere, and that is what the Cisco Cisco Certified Specialist – Network Security Firepower training course will do for you: create a foundation to build on. Study guides are essentially a detailed Cisco Cisco Certified Specialist – Network Security Firepower 300-710 tutorial and are great introductions to new Cisco Cisco Certified Specialist – Network Security Firepower training courses as you advance. The content is always relevant, and compound again to make you pass your 300-710 exams on the first attempt. You will frequently find these 300-710 PDF files downloadable and can then archive or print them for extra reading or studying on-the-go.
300-710 Exam Video Training
For some, this is the best way to get the latest Cisco Cisco Certified Specialist – Network Security Firepower 300-710 training. However you decide to learn 300-710 exam topics is up to you and your learning style. The Joogate Cisco Cisco Certified Specialist – Network Security Firepower products and tools are designed to work well with every learning style. Give us a try and sample our work. You’ll be glad you did.
300-710 Other Features
* Realistic practice questions just like the ones found on certification exams.
* Each guide is composed from industry leading professionals real Cisco Cisco Certified Specialist – Network Security Firepowernotes, certifying 100% brain dump free.
* Study guides and exam papers are help you prepare effectively or .
* Designed to help you complete your certificate using only
* Delivered in PDF format for easy reading and printing Joogate unique have you dancing the Cisco Cisco Certified Specialist – Network Security Firepower jig before you know it
* Cisco Certified Specialist – Network Security Firepower 300-710 prep files are frequently updated to maintain accuracy. Your courses will always be up to date.
Get Cisco Certified Specialist – Network Security Firepower ebooks from Joogate which contain real 300-710 exam questions and answers. You WILL pass your Cisco Certified Specialist – Network Security Firepower exam on the first attempt using only Joogate’s Cisco Certified Specialist – Network Security Firepower excellent preparation tools and tutorials.
