ETExamTower
Sign in
300-710Updated 19d ago · Sep 14, 2026

Securing Networks with Cisco Firepower (300-710 SNCF)

425 questions across 1 topics, with suggested answers, explanations where available, and imported community discussion. The first 42 questions are free to preview.

Browse questions Practice mode

Topics

#TopicQuestionsFree
1Configuration8342

Preview

42 of 83 accessible
Question 1 · Configuration Open

Refer to the exhibit. An engineer needs to create a QoS policy in Cisco Firepower Management Center that limits HTTP and HTTPS traffic from HR users. Set both the upload and download limit for HTTP and HTTPS traffic to 5 Mb/s. <DragDrop items={["192.168.1.0/24","192.168.2.0/24","HTTP-HTTPS","HTTP-HTTPS-QoS","5 Mb/s","Interfaces in Destination Interface Objects"]} slots={[{"answer":"HTTP-HTTPS-QoS","id":"name","label":"Name"},{"answer":"Interfaces in Destination Interface Objects","id":"apply_qos_on","label":"Apply QoS On"},{"answer":"5 Mb/s","id":"download_upload_limit","label":"Download/Upload Limit"},{"answer":"192.168.1.0/24","id":"source_interface_networks","label":"Source Interface Networks"},{"answer":"192.168.2.0/24","id":"destination_interface_networks","label":"Destination Interface Networks"},{"answer":"HTTP-HTTPS","id":"destination_ports","label":"Destination Ports"}]} explanation={"HR hosts are in 192.168.1.0/24 and send web traffic through the FTD toward the outside network 192.168.2.0/24. The QoS rule therefore matches that source network, the outside-facing destination interface network, and the HTTP/HTTPS port object. Applying QoS on the interfaces specified by the destination interface object enforces rate limiting on the outbound interface, with both upload and download set to the required 5 Mb/s.\n\n**Learn more:** [Cisco: Configuring QoS Rules](https://docs.manage.security.cisco.com/cdfmc/t_configuring_qos_rules.html) · [Cisco: QoS rule components](https://docs.manage.security.cisco.com/cdfmc/r_qos_rule_components.html)"} reuse={false} />

Question exhibit
Answer: —
Question 2 · Integration Open

An engineer is integrating Cisco Secure Endpoint with Cisco Secure Firewall Management Center running in high-availability mode. Malware events detected by Secure Endpoint must also be received by Cisco Secure Firewall Management Center, and public cloud services are in use. Which two configurations must be selected independently on both high-availability peers? (Choose two.)

Answer: A, E Secure Endpoint cloud connections are not synchronized across Firewall Management Center high-availability peers, so each peer requires its own Secure Endpoint Cloud Connection. Because the deployment uses the public AMP cloud, both peers must have internet connectivity to communicate with the cloud and preserve malware-event and disposition continuity after failover. **Learn more:** [Cisco Secure Firewall Management Center Device Configuration Guide—File Policies for Network Malware Protection](https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/770/management-center-device-config-77/advanced-access-file.html) · [Cisco Secure Firewall Management Center Administration Guide—Security, Internet Access, and Communication Ports](https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/760/management-center-admin-76/reference-ports.html)
Question 3 · Configuration Open

How many report templates can the Cisco Firepower Management Center support?

Answer: D Cisco Firepower Management Center supports creating as many report templates as needed, rather than imposing a fixed limit such as 5, 10, or 20. **Learn more:** [Cisco Firepower Management Center Configuration Guide, Version 7.0 — Working with Reports](https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/working_with_reports.html)