CCNP Security 300-710 SNCF Practice Test 13

CCNP Security 300-710 SNCF Practice Test 13 (Hard) - Network Analysis Policy and Intrusion Policy Basics

CISCO CCNP Security Exam Logo

1 / 10

Which FMC policy type governs how traffic is preprocessed and normalized (such as protocol decoding) before intrusion rule matching occurs?

2 / 10

Which policy type contains the actual set of Snort intrusion rules (signatures) evaluated against traffic to detect known attack patterns?

3 / 10

Which intrusion policy concept refers to a pre-built collection of intrusion rules with recommended rule states, such as Balanced Security and Connectivity, that administrators can use as a starting point?

4 / 10

Which intrusion policy construct allows administrators to define network ranges (such as $HOME_NET and $EXTERNAL_NET) used by intrusion rules to distinguish internal from external traffic?

5 / 10

Which intrusion rule state would cause a matching rule to both generate an alert and actively drop the offending packet when the device is deployed inline?

6 / 10

Which feature allows administrators to reduce alert volume for a specific intrusion rule that is generating excessive, low-value alerts for a known, accepted traffic pattern, without fully disabling the rule for all traffic?

7 / 10

Which intrusion policy feature limits the rate at which alerts are generated for a specific rule and traffic pattern, useful for noisy but low-severity signatures that fire repeatedly in a short time?

8 / 10

Which preprocessing function performed by the Network Analysis Policy helps intrusion rules correctly evaluate traffic that has been fragmented at the IP layer?

9 / 10

Which practice would help an administrator avoid excessive false positives when first enabling a stricter base intrusion policy (such as Security Over Connectivity) in a production environment?

10 / 10

Which combination of intrusion policy elements together provides both accurate detection and manageable alert volume for a production Secure Firewall Threat Defense deployment?

Your score is

The average score is 0%

0%