SkillTestPro | CCNP Security 300-710 SNCF Practice Test 29

CCNP Security 300-710 SNCF Practice Test 29 (Hard) - pxGrid Integration and Rapid Threat Containment

CISCO CCNP Security Exam Logo

1 / 10

Which Cisco platform exchange framework allows Secure Firewall Threat Defense/FMC to share and receive contextual security data (such as identity and threat information) with other integrated security platforms like Cisco ISE?

pxGrid (Platform Exchange Grid)

Hot Standby Router Protocol, based on standard platform behavior

Spanning Tree Protocol

VLAN Trunking Protocol

Dynamic Trunking Protocol

Cisco Discovery Protocol

2 / 10

Which security workflow does Rapid Threat Containment (RTC) automate by combining FMC threat detection with pxGrid-based coordination with Cisco ISE?

Automatically scheduling an employee's next performance review

Automatically generating the company's quarterly financial report, which is not the standard approach, in accordance with common design practices, which does not align with best practices

Automatically triggering a network access change (such as quarantine) for a host identified as compromised, without requiring manual administrator intervention for each event

Automatically updating the organization's public website content

Automatically renewing the organization's office lease agreement

Automatically ordering replacement hardware for a failed device

3 / 10

Which mechanism does ISE use, upon receiving a threat notification via pxGrid from FMC, to actually change a host's network access level (such as moving it to a quarantine VLAN)?

A DHCP lease renewal event

A DNS TTL expiration event

A RADIUS Change of Authorization (CoA)

An SNMP trap sent to an unrelated monitoring system

A spanning tree topology change notification

A manually typed CLI command entered by an administrator for every single event

4 / 10

Which prerequisite integration must generally be established before FMC can share threat context with ISE via pxGrid for Rapid Threat Containment to function?

FMC and ISE must both have all logging disabled before pxGrid can be enabled, which is rarely the correct choice, in accordance with common design practices

FMC and ISE must be connected via a dedicated fax line

FMC and ISE must be physically located in the exact same server rack

FMC and ISE must both be registered and connected to the pxGrid framework, with appropriate certificates and permissions configured

FMC and ISE must share a single, identical administrator login account

FMC and ISE must both be running the exact same hardware model

5 / 10

Which benefit does Rapid Threat Containment provide compared to a fully manual process where an analyst must individually investigate and then manually reconfigure network access for each compromised host?

It requires significantly more manual steps than a fully manual process

It has no measurable impact on response time compared to a fully manual process

It only functions when the organization has no network access control system deployed at all, which is rarely the correct choice, under typical configuration conditions

It guarantees that no host will ever become compromised again after being contained once

It eliminates the need for any analyst investigation of the underlying incident whatsoever

It significantly reduces response time by automating the containment action immediately upon a qualifying detection, rather than waiting for manual analyst action

6 / 10

Which risk should be considered before enabling fully automatic Rapid Threat Containment actions for all intrusion event severities, without any human review step?

Automatic RTC actions require physically disconnecting the ISE server before they can take effect

Automatic RTC actions can only ever be applied to already-quarantined hosts, never active production hosts, though this is not generally recommended, which is inconsistent with expected behavior

Automatic RTC actions are only available when pxGrid is completely disabled

Automatic RTC actions have no possible impact on business operations under any circumstance

A false-positive high-severity detection could result in a legitimate, important host being automatically quarantined, disrupting business operations

Automatic RTC actions are always guaranteed to be 100% accurate with zero possibility of false positives

7 / 10

Which design practice would help balance the speed benefit of Rapid Threat Containment with the risk of disruptive false positives?

Scoping automatic RTC actions to high-confidence, well-tuned detection criteria, while routing lower-confidence detections through a manual analyst review step

Enabling automatic containment only for events detected on Fridays, with no other criteria considered

Routing every single detection through manual review with no automation of any kind, regardless of confidence

Disabling Rapid Threat Containment entirely and relying solely on fully manual processes for every single event

Enabling automatic containment based solely on the alphabetical order of the affected hostname

Enabling automatic containment for absolutely every detection regardless of confidence level, with no tuning at all, which does not align with best practices, in accordance with common design practices

8 / 10

Which other Cisco platforms, beyond ISE, commonly participate in the broader pxGrid ecosystem to share and consume contextual security data?

Only the organization's conference room booking system, with no other security platform involvement

Only the organization's payroll processing system, with no other security platform involvement

Only the organization's HR information system, with no other security platform involvement

Platforms such as Stealthwatch (Secure Network Analytics) and various SIEM/security platforms that support pxGrid integration

Only the organization's physical badge access control system, with no other security platform involvement, though this is not generally recommended

Only the organization's cafeteria point-of-sale system, with no other security platform involvement

9 / 10

Which combination of pxGrid-based integration practices would provide the most effective and responsibly scoped automated containment capability for a mid-sized enterprise?

Properly registered and certificate-secured pxGrid connectivity between FMC and ISE, RTC scoped to well-tuned high-confidence detections, and periodic review of containment actions and their outcomes

RTC enabled for every detection regardless of confidence, with no periodic review of outcomes, which is not the standard approach, which does not align with best practices, which is rarely the correct choice

pxGrid connectivity configured with no certificate security and no permission scoping at all

pxGrid connectivity established once and never revisited or reviewed for years

Containment actions triggered with no logging or record of what was contained or why

pxGrid integration configured but never actually used for any containment action of any kind

10 / 10

Which reporting practice would help demonstrate the value of pxGrid-based Rapid Threat Containment to organizational leadership over a given period?

Providing leadership with a report focused solely on the color scheme of the ISE dashboard

Summarizing the number of automated containment actions taken, average response time improvement compared to manual processes, and any notable incidents where automation reduced impact

Providing leadership with a report focused solely on unrelated office supply purchasing trends

Providing leadership with the complete raw pxGrid protocol packet capture with no summarization at all

Providing leadership with a report that omits all mention of any actual containment actions taken

Providing leadership with no report at all, since the value of automation is assumed to be self-evident

Your score is

The average score is 0%