300-710 Engineer Practice Questions

A network security engineer must export packet captures from the Cisco FMC web browser while troubleshooting an issue. When navigating to the address https://<FMC IP>/capture/CAPI/pcap/test.pcap, an error 403: Forbidden is given instead of the PCAP file. Which action must the engineer take to resolve this issue?

• AA. Disable the HTTPS server and use HTTP instead.
• BB. Enable the HTTPS server for the device platform policy.
• CC. Disable the proxy setting on the browser.
• DD. Use the Cisco FTD IP address as the proxy server setting on the browser.

Refer to the exhibit. An engineer is modifying an access control policy to add a rule to Inspect all DNS traffic that passes it making the change and deploying the policy, they see that DNS traffic Is not being Inspected by the Snort engine. What is......

• AA. The action of the rule is set to trust instead of allow.
• BB. The rule must specify the security zone that originates the traffic.
• CC. The rule Is configured with the wrong setting for the source port.
• DD. The rule must define the source network for inspection as well as the port.

An engineer is attempting to add a new FTD device to their FMC behind a NAT device with a NAT ID of ACME001 and a password of Cisco388267669. Which command set must be used in order to accomplish this?

• AA. configure manager add ACME001 <registration key> <FMC IP>
• BB. configure manager add <FMC IP> ACME001 <registration key>
• CC. configure manager add DONTRESOLVE <FMC IP> AMCE001 <registration key>
• DD. configure manager add <FMC IP> <registration key> ACME001