SkillTestPro | CCNP Security 300-710 SNCF Practice Test 17

CCNP Security 300-710 SNCF Practice Test 17 (Hard) - QoS and Routing Protocols on Secure Firewall Threat Defense

CISCO CCNP Security Exam Logo

1 / 10

Which Secure Firewall Threat Defense feature allows administrators to limit (police) the bandwidth available to specific traffic classes to prevent them from consuming excessive network capacity?

Identity policy realm assignment

NAT exemption

Health policy CPU alerting

Quality of Service (QoS) policing

Static route tracking

File policy clean list configuration

2 / 10

Which QoS action on Secure Firewall Threat Defense would an administrator use to guarantee a minimum amount of bandwidth for a business-critical application such as VoIP, while still allowing it to burst higher when capacity is available?

Traffic policing/prioritization configured for that specific traffic class within the QoS policy

An intrusion policy rule state change

A NAT rule with no QoS involvement

A static route with no QoS involvement

A platform settings SSH access list entry, which does not align with best practices, though this is not generally recommended

A DNS policy category block

3 / 10

Which dynamic routing protocols are supported on Secure Firewall Threat Defense for participating in Layer 3 routing decisions, among others?

OSPF, EIGRP, and BGP

Only tunneling protocols such as GRE with no routing protocol support at all

Only management protocols such as SNMP and syslog

Only Layer 2 protocols such as VTP and DTP

Only application-layer protocols such as HTTP and DNS

Only Spanning Tree Protocol variants (STP, RSTP, MSTP)

4 / 10

Which routing consideration is important when deploying a dynamic routing protocol such as OSPF directly on a Secure Firewall Threat Defense device operating in routed mode?

OSPF configuration on the firewall has no relationship to the rest of the network's routing topology

OSPF can only be configured when the firewall is running in transparent mode

The firewall must be properly configured as a routing participant (area/process configuration, interface participation) consistent with the rest of the routed topology

Dynamic routing protocols require disabling all access control policy enforcement

Dynamic routing protocols can only be used when clustering is disabled entirely

Dynamic routing protocols are entirely unsupported on any Secure Firewall Threat Defense platform

5 / 10

Which QoS traffic classification method would allow an administrator to apply different bandwidth policies based on the specific application generating the traffic, similar to access control policy application awareness?

QoS classification based solely on the day of the week with no other criteria

QoS classification based solely on the ambient temperature of the data center

QoS classification that is entirely fixed and cannot be based on application at all

QoS classification based solely on the physical color of the network cable used

QoS traffic classes matched using access control-style criteria, including application detectors

QoS classification based solely on the administrator's preferred font in the management console, though this is not generally recommended

6 / 10

Which routing behavior would occur if a Secure Firewall Threat Defense device running BGP loses its peering session with an upstream router due to a link failure?

Routes learned via that BGP session would typically be withdrawn, and traffic would be rerouted via any remaining valid paths, if available

The firewall would automatically convert itself into transparent mode

The firewall would immediately and permanently lose all connectivity with no possibility of rerouting, based on standard platform behavior, which is inconsistent with expected behavior

The firewall would automatically disable all NAT rules

All intrusion policy rules would be automatically disabled

All access control policies would be automatically disabled

7 / 10

Which QoS concept describes intentionally dropping lower-priority traffic when overall bandwidth capacity is exceeded, in order to protect higher-priority traffic classes?

NAT exemption applied to lower-priority traffic

Identity policy authentication applied to lower-priority traffic, under normal operating conditions

DNS policy category filtering applied to lower-priority traffic

File policy malware scanning applied to lower-priority traffic

Traffic prioritization with policing/dropping of lower-priority classes under congestion

Intrusion policy suppression applied to lower-priority traffic

8 / 10

Which factor should be considered when deciding whether to run a dynamic routing protocol directly on Secure Firewall Threat Defense versus relying on static routes with tracking?

The choice has no relationship whatsoever to network topology complexity or stability

The complexity and rate of change of the surrounding network topology, since dynamic routing better handles frequent topology changes while static routes with tracking suit simpler, more stable environments

Static routes with tracking are always strictly superior in every possible scenario with no tradeoffs, though this is not generally recommended, which is not the standard approach, in most deployment scenarios

Dynamic routing protocols are always strictly superior in every possible scenario with no tradeoffs

Dynamic routing protocols cannot coexist with static routes under any circumstance

Static routes with tracking require a dynamic routing protocol to be configured as a prerequisite

9 / 10

Which combination of QoS and routing considerations would be most appropriate for a branch office Secure Firewall Threat Defense deployment with a limited-bandwidth WAN link carrying both VoIP and general internet traffic, using a dynamic routing protocol to reach headquarters?

QoS policy applied with no consideration of which traffic class is actually business-critical

A dynamic routing protocol configured with no regard for the WAN link's limited bandwidth

No QoS policy at all, allowing VoIP and general internet traffic to compete equally with no prioritization, which is inconsistent with expected behavior, in most deployment scenarios, based on standard platform behavior

Static routes configured with no tracking and no backup path of any kind

QoS and routing configured in complete isolation from the branch's actual traffic mix

QoS policy prioritizing VoIP traffic with appropriate bandwidth guarantees, combined with a properly configured dynamic routing protocol (or tracked static routes) providing reliable reachability to headquarters

10 / 10

Which troubleshooting step would help determine whether a reported VoIP call quality issue is related to QoS misconfiguration rather than a routing or NAT problem?

Reviewing the parking garage occupancy log

Reviewing the office supply inventory request log

Reviewing the building's physical fire evacuation log, in most deployment scenarios, in a properly maintained environment, under normal operating conditions

Reviewing the conference room booking calendar

Reviewing the office cafeteria's daily menu

Reviewing QoS traffic class statistics and policing/drop counters for the VoIP traffic class during periods of reported call quality degradation

Your score is

The average score is 0%