CCNP Security 300-710 Full Course Free

Page: 10 / 18

Question 40

An engineer is troubleshooting a device that cannot connect to a web server. The connection is initiated from the Cisco FTD inside interface and attempting to reach 10.0.1.100 over the non-standard port of 9443 The host the engineer is attempting the connection from is at the IP address of 10.20.10.20. In order to determine what is happening to the packets on the network, the engineer decides to use the FTD packet capture tool Which capture configuration should be used to gather the information needed to troubleshoot this issue?

Options:

Option A

Option B

Option C

Option D

Question 41

What is the role of the casebook feature in Cisco Threat Response?

Options:

sharing threat analysts

pulling data via the browser extension

triage automaton with alerting

alert prioritization

Question 42

An engineer needs to configure remote storage on Cisco FMC. Configuration backups must be available from a secure location on the network for disaster recovery. Reports need to back up to a shared location that auditors can access with their Active Directory logins. Which strategy must the engineer use to meet these objectives?

Options:

Use SMB for backups and NFS for reports.

Use NFS for both backups and reports.

Use SMB for both backups and reports.

Use SSH for backups and NFS for reports.

Question 43

A network administrator configured a NAT policy that translates a public IP address to an internal web server IP address. An access policy has also been created that allows any source to reach the public IP address on port 80. The web server is still not reachable from the Internet on port 80. Which configuration change is needed?