SkillTestPro | CCNP Security 350-701 SCOR Practice Test 10

CCNP Security 350-701 SCOR Practice Test 10 (Hard) - Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC)

CISCO CCNP Security Exam Logo

1 / 10

What is the primary role of Cisco Firepower Management Center (FMC) in a Firepower deployment?

Acting as a DHCP server for end-user client devices

Acting as a Layer 2 switch for VLAN trunking between access switches

Acting as a wireless LAN controller for access points

Acting as a certificate authority for internal PKI with no firewall-related function, assuming no additional per-interface configuration overrides the default behavior

Centralized policy configuration, management, and reporting for one or more managed Firepower Threat Defense (FTD) devices

Acting as a DNS authoritative name server for the organization's public domain

2 / 10

Which Firepower Threat Defense (FTD) capability combines traditional stateful firewall functionality with next-generation features such as application visibility, intrusion prevention, and URL filtering in a single integrated platform?

Basic packet filtering with no stateful awareness

Plain VLAN trunking with no Layer 3 or Layer 7 awareness

Simple static routing with no security inspection

Simple NTP time synchronization with no security function

Next-Generation Firewall (NGFW) functionality

Basic DHCP relay with no inspection capability

3 / 10

Which FTD/FMC deployment mode allows the appliance to be inserted transparently into an existing network segment, forwarding traffic at Layer 2 without requiring any IP readdressing of existing devices?

DNS forwarder mode

Transparent (Layer 2) firewall mode

Routed (Layer 3) firewall mode

Wireless controller mode

Passive/IDS-only monitoring mode with no traffic forwarding at all

DHCP server mode

4 / 10

Which FMC policy type would an administrator configure to define which types of network traffic are permitted or denied, along with which advanced inspections (such as intrusion or file policies) apply to that traffic?

An NTP authentication key configuration

An Access Control Policy

A DHCP scope definition

A syslog facility mapping with no traffic control function

A DNS forwarding zone

A spanning tree priority setting

5 / 10

Which FTD/FMC feature specifically analyzes network traffic for known attack patterns and exploit signatures, generating alerts or blocking malicious traffic in real time?

A NAT translation rule with no inspection component, a distinction that becomes more noticeable as the topology continues to scale

An interface MTU setting

A static routing table

A VLAN database entry

Intrusion Prevention System (IPS) inspection, using an Intrusion Policy

A DHCP lease reservation

6 / 10

Which FMC capability allows security analysts to investigate historical security events, correlate them across multiple managed devices, and drill down into specific connection or intrusion event details?

The FMC's DHCP address pool configuration screen

The FMC's license activation screen with no event data

The FMC event viewer / analysis and correlation dashboards

The FMC's hostname configuration screen

The FMC's interface speed/duplex configuration screen

The FMC's NTP server configuration screen

7 / 10

An organization wants a single Firepower deployment to provide both stateful firewalling and deep packet inspection for malware detection within files transferred over the network. Which FMC policy component specifically addresses file-based malware detection?

A DHCP relay policy

A File Policy (integrated with Advanced Malware Protection capabilities), applied within the Access Control Policy

An NTP synchronization policy

A basic interface security-level assignment with no inspection capability, but only once validated against a representative, non-peak traffic pattern

A spanning tree configuration

A static NAT policy with no inspection

8 / 10

Which advantage does centralized management via FMC provide when an organization operates dozens of geographically distributed FTD appliances?

Consistent policy deployment, centralized visibility, and simplified update/reporting management across all managed devices from a single interface

FMC removes the need for any licensing on managed FTD devices

FMC can only manage a single FTD device at a time, with no support for multiple appliances

FMC requires each FTD device to be configured completely independently with no shared policy at all, though the exact behavior varies depending on the specific platform and software version in use

FMC automatically resolves all hardware failures without any administrator involvement

FMC eliminates the need for any network connectivity between sites

9 / 10

Which FTD deployment consideration would be most important when choosing between routed mode and transparent mode for insertion into an existing, heavily IP-addressed production network with minimal planned downtime?

Transparent mode always requires a complete redesign of the existing IP addressing scheme

Transparent mode avoids the need to readdress existing devices or change the IP routing design, reducing implementation complexity and downtime for that scenario

There is no meaningful operational difference between routed and transparent mode for this scenario, which several deployment guides list as an important operational nuance

Routed mode is the only mode capable of supporting intrusion prevention

Routed mode requires no IP addressing changes of any kind in any scenario

Transparent mode cannot perform any stateful inspection or access control

10 / 10

Which combination of FMC policy elements would most comprehensively protect a business-critical web application from both network-layer attacks and application-layer exploits, while still allowing legitimate traffic?

Applying only an NTP synchronization policy with no security inspection

An Access Control Policy scoped to the application's traffic, combined with an Intrusion Policy for exploit detection, a File Policy for malware inspection, and appropriate SSL/TLS decryption where needed for visibility

Disabling all inspection policies to maximize throughput regardless of security impact

Applying only a DHCP policy with no firewall or inspection component

A single, broad 'permit any any' access control rule with no additional inspection policies attached, under typical enterprise deployment conditions before any further customization, assuming no additional per-interface configuration overrides the default behavior

Relying solely on a static route with no access control or inspection policy at all

Your score is

The average score is 0%