2026 Updated Cisco 300-710 Certification Study Guide Pass 300-710 Fast [Q128-Q146]

April 11, 2026 300-710, Cisco 0 Comments

2026 Updated Cisco 300-710 Certification Study Guide Pass 300-710 Fast [Q128-Q146]

4.5/5 - (2 votes)

2026 Updated Cisco 300-710 Certification Study Guide Pass 300-710 Fast

300-710 Dumps PDF 2026 Program Your Preparation EXAM SUCCESS

Q128. A network security engineer must export packet captures from the Cisco FMC web browser while troubleshooting an issue. When navigating to the address https://<FMC IP>/capture/CAPI/pcap/test.pcap. an error 403: Forbidden is given instead of the PCAP file. Which action must the engineer take to resolve this issue?

Disable the HTTPS server and use HTTP instead.

Enable the HTTPS server for the device platform policy.

Disable the proxy setting on the browser.

Use the Cisco FTD IP address as the proxy server setting on the browser.

Q129. The event dashboard within the Cisco FMC has been inundated with low priority intrusion drop events, which are overshadowing high priority events. An engineer has been tasked with reviewing the policies and reducing the low priority events. Which action should be configured to accomplish this task?

generate events

drop packet

drop connection

drop and generate

Q130. Which two conditions must be met to enable high availability between two Cisco FTD devices? (Choose two.)

same flash memory size

same NTP configuration

same DHCP/PPoE configuration

same host name

same number of interfaces

Q131. A network administrator reviews me attack risk report and notices several Low-Impact attacks. What does this type of attack indicate?

All attacks are listed as low until manually categorized.

The host is not vulnerable to those attacks.

The attacks are not dangerous to the network.

The host is not within the administrator’s environment.

Q132. Which CLI command is used to generate firewall debug messages on a Cisco Firepower?

system support firewall-engine-debug

system support ssl-debug

system support platform

system support dump-table

Q133. What is the disadvantage of setting up a site-to-site VPN in a clustered-units environment?

VPN connections can be re-established only if the failed master unit recovers.

Smart License is required to maintain VPN connections simultaneously across all cluster units.

VPN connections must be re-established when a new master unit is elected.

Only established VPN connections are maintained when a new master unit is elected.

Q134. An engineer is configuring a Cisco FTD appliance in IPS-only mode and needs to utilize fail-to-wire interfaces.
Which interface mode should be used to meet these requirements?

passive

routed

transparent

inline set

Q135. A security analyst must create a new report within Cisco FMC to show an overview of the daily attacks, vulnerabilities, and connections. The analyst wants to reuse specific dashboards from other reports to create this consolidated one. Which action accomplishes this task?

Create a new dashboard object via Object Management to represent the desired views.

Modify the Custom Workflows within the Cisco FMC to feed the desired data into the new report.

Copy the Malware Report and modify the sections to pull components from other reports.

Use the import feature in the newly created report to select which dashboards to add.

Q136. A security engineer must configure policies tor a recently deployed Cisco FTD. The security policy for the company dictates that when five or more connections from external sources are initiated within 2 minutes, there is cause for concern. Which type of policy must be configured in Cisco FMC z generate an alert when this condition is triggered?

application detector

access control

intrusion

correlation

Q137. Refer to the exhibit. A security engineer views the health alerts in Cisco Secure Firewall Management Center by using the Health Monitor in the web interface. One of the alerts shows an appliance as critical because the Time Synchronization module status is out of sync. To troubleshoot the issue, the engineer runs the ntpq command in Secure Firewall Management Center. The output is shown in the exhibit. Which action must the security engineer take next to resolve the issue?

Configure the appliance to receive the time from an NTP server.

Reestablish the connection to the timeserver.

Reset the appliance with a hard reboot.

Configure the appliance to sync with its own internal clock.

Q138. Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?

configure coredump packet-engine enable

capture-traffic

capture

capture WORD

Q139. An engineer must configure high availability for the Cisco Firepower devices. The current network topology does not allow for two devices to pass traffic concurrently.
How must the devices be implemented in this environment?

in active/active mode

in a cluster span EtherChannel

in active/passive mode

in cluster interface mode

Q140. An engineer must implement static route tracking on a Cisco Secure Firewall Threat Defense appliance. Static route and IP SLA operation has already been configured. Static route must be removed from the routing table if the tracked object is unreachable. Which action must the engineer take next to meet the requirement?

Implement a secondary route that has a higher precedence.

Enable the IP SLA Responder on the backup path interface.

Assign a tracking object to the static route and the IP SLA operation.

Enable an ICMP redirect message on the interface connected to the backup path.

Q141. Refer to the exhibit.

An organization has an access control rule with the intention of sending all social media traffic for inspection After using the rule for some time, the administrator notices that the traffic is not being inspected, but is being automatically allowed What must be done to address this issue?

Modify the selected application within the rule

Change the intrusion policy to connectivity over security.

Modify the rule action from trust to allow

Add the social network URLs to the block list

Q142. An engineer is configuring a Cisco Secure Firewall Threat Defense device to operate in transparent mode between two switch stacks. VLAN 10 is used for in-band management on both switch stacks. Which two actions are required on the device to inspect traffic between the two switch stacks without causing any interruption to network traffic? (Choose two.)

Set the MTU to 9198 on all interfaces to support jumbo frames.

Add separate routes for data and management traffic.

Exempt BPDUs from advanced inspection

Configure a BVI interface for VLAN 10.

Configure at least one bridge group.

Q143. What is a feature of Cisco AMP private cloud?

It supports anonymized retrieval of threat intelligence

It supports security intelligence filtering.

It disables direct connections to the public cloud.

It performs dynamic analysis

Q144. A network administrator is concerned about the high number of malware files affecting users’ machines. What must be done within the access control policy in Cisco FMC to address this concern?

Create an intrusion policy and set the access control policy to block.

Create an intrusion policy and set the access control policy to allow.

Create a file policy and set the access control policy to allow.

Create a file policy and set the access control policy to block.

Q145. Which feature sets up multiple interfaces on a Cisco Secure Firewall Threat Defense to be on the same subnet?

EtherChannel

SVI

BVI

security levels

Q146. An organization has a Cisco FTD that uses bridge groups to pass traffic from the inside interfaces to the outside interfaces. They are unable to gather information about neighbouring Cisco devices or use multicast in their environment. What must be done to resolve this issue?

Create a firewall rule to allow CDP traffic.

Create a bridge group with the firewall interfaces.

Change the firewall mode to transparent.

Change the firewall mode to routed.