300-710 무료 덤프문제 온라인 액세스

While integrating Cisco Umbrella with Cisco Threat Response, a network security engineer wants to automatically push blocking of domains from the Cisco Threat Response interface to Cisco Umbrella. Which API meets this requirement?

• A.REST
• B.investigate
• C.reporting
• D.enforcement

An engineer defines a new rule while configuring an Access Control Policy. After deploying the policy, the rule is not working as expected and the hit counters associated with the rule are showing zero. What is causing this error?

• A.The wrong source interface for Snort was selected in the rule.
• B.Logging is not enabled for the rule.
• C.The rule was not enabled after being created.
• D.An incorrect application signature was used in the rule.

Due to an Increase in malicious events, a security engineer must generate a threat report to include intrusion in events, malware events, and security intelligence events. How Is this information collected in a single report?

• A.Export the Attacks Risk report.
• B.Generate a malware report.
• C.Run the default Firepower report.
• D.Create a Custom report.

An engineer must perform a packet capture on a Cisco Secure Firewall Threat Defense device to confirm the MAC address of the host using IP address 192.168.100.100 while troubleshooting an ARP issue. What is the correct tcpdump command syntax to ensure that the MAC address appears in the packet capture output?

• A.-w capture.pcap -s 1518 host 192.168.100.100 ether
• B.-w capture.pcap -s 1518 host 192.168.100.100 mac
• C.-ne src 192.168.100.100
• D.-nm src 192.168.100.100

Which Cisco Secure Firewall Threat Defense interface mode must be deployed when implementing an IPS that must receive and retransmit all traffic unless the traffic is explicitly dropped?

• A.Routed
• B.Passive
• C.Inline
• D.Transparent