Cisco Exam 300-710 Topic 5 Question 43 Discussion

Actual exam question for Cisco's 300-710 exam

Question #: 43
Topic #: 5

An engineer is troubleshooting connectivity to the DNS servers from hosts behind a new Cisco FTD device. The hosts cannot send DNS queries to servers in the DMZ. Which action should the engineer take to troubleshoot this issue using the real DNS packets?

AUse the Connection Events dashboard to check the block reason and adjust the inspection policy as needed.

BUse the packet capture tool to check where the traffic is being blocked and adjust the access control or intrusion policy as needed.

CUse the packet tracer tool to determine at which hop the packet is being dropped.

DUse the show blocks command in the Threat Defense CLI tool and create a policy to allow the blocked traffic.

Show Suggested Answer

Suggested Answer: A

by Levi at May 03, 2022, 11:07 AM

Limited Time Offer

25%

Off

Get Premium 300-710 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!