Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Cisco 300-710 Exam - Topic 5 Question 43 Discussion

An engineer is troubleshooting connectivity to the DNS servers from hosts behind a new Cisco FTD device. The hosts cannot send DNS queries to servers in the DMZ. Which action should the engineer take to troubleshoot this issue using the real DNS packets?
A) Use the Connection Events dashboard to check the block reason and adjust the inspection policy as needed.
B) Use the packet capture tool to check where the traffic is being blocked and adjust the access control or intrusion policy as needed.
C) Use the packet tracer tool to determine at which hop the packet is being dropped.
D) Use the show blocks command in the Threat Defense CLI tool and create a policy to allow the blocked traffic.

Cisco 300-710 Exam - Topic 5 Question 43 Discussion

Actual exam question for Cisco's 300-710 exam
Question #: 43
Topic #: 5
[All 300-710 Questions]

An engineer is troubleshooting connectivity to the DNS servers from hosts behind a new Cisco FTD device. The hosts cannot send DNS queries to servers in the DMZ. Which action should the engineer take to troubleshoot this issue using the real DNS packets?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Levi at May 03, 2022, 11:07 AM

Limited Time Offer

25%

Off

Get Premium 300-710 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Shawnda
10 months ago
Not sure about D, seems like a last resort to me.
upvoted 0 times
...
Shalon
10 months ago
Wait, are we really using the CLI for this? Sounds old school!
upvoted 0 times
...
Suzi
11 months ago
C could help too, but not as direct as B.
upvoted 0 times
...
Hana
11 months ago
A seems too vague, I’d stick with B.
upvoted 0 times
...
Flo
11 months ago
Definitely go with B, packet capture is key!
upvoted 0 times
...
Leigha
11 months ago
Configuring NAT or IPSec doesn't seem relevant to the problem here. I think the key is to focus on the Windows firewall settings and logging.
upvoted 0 times
...
Joye
11 months ago
I'm a little confused by the wording of the question. What exactly does "configure the solution" mean in this context? I'll need to think carefully about the differences between the answer choices.
upvoted 0 times
...

Save Cancel