Cisco 300-207 Online Practice Questions and Exam Preparation

Cisco 300-207 Online Questions & Answers

• Question 1:

  A Cisco Email Security Appliance uses which message filter to drop all executable attachments entering and leaving the Cisco Email Security Appliance?

  A. drop-exE. if (attachment-filename == "\\.exe$") OR (attachment-filetype == "exe") { drop(); }
  B. drop-exE. if (recv-listener == "InboundMail" ) AND ( (attachment-filename == "\\.exe$") OR (attachment-filetype == "exe")) { drop(); }
  C. drop-exe! if (attachment-filename == "\\.exe$") OR (attachment-filetype == "exe") { drop(); }
  D. drop-exe! if (recv-listener == "InboundMail" ) AND ( (attachment-filename == "\\.exe$") OR (attachment- filetype == "exe")) { drop(); }
  A. drop-exE. if (attachment-filename == "\\.exe$") OR (attachment-filetype == "exe") { drop(); }

• Question 2:

  Which IPS signature regular expression CLI command matches a host issuing a domain lookup for www.theblock.com?

  A. regex-string (\x03[Tt][Hh][Ee]\x05[Bb][Ll][Oo][Cc][Kk])
  B. regex-string (\x0b[theblock.com])
  C. regex-string (\x03[the]\x05[block]0x3[com])
  D. regex-string (\x03[T][H][E]\x05[B][L][O][C][K]\x03[.][C][O][M]
  A. regex-string (\x03[Tt][Hh][Ee]\x05[Bb][Ll][Oo][Cc][Kk])

• Question 3:

  What is the default antispam policy for positively identified messages?

  A. Drop B. Deliver and Append with [SPAM]
  C. Deliver and Prepend with [SPAM]
  D. Deliver and Alternate Mailbox
  C. Deliver and Prepend with [SPAM]

• Question 4:

  Which IPS engine detects ARP spoofing?

  A. Atomic ARP Engine
  B. Service Generic Engine
  C. ARP Inspection Engine
  D. AIC Engine
  A. Atomic ARP Engine

• Question 5:

  What is the access-list command on a Cisco IPS appliance used for?

  A. to permanently filter traffic coming to the Cisco IPS appliance via the sensing port
  B. to filter for traffic when the Cisco IPS appliance is in the inline mode
  C. to restrict management access to the sensor
  D. to create a filter that can be applied on the interface that is under attack
  C. to restrict management access to the sensor

• Question 6:

  The Web Cache Communication Protocol (WCCP) is a content-routing protocol that can facilitate the redirection of traffic flows in real time. Your organization has deployed WCCP to redirect web traffic that traverses their Cisco Adaptive Security Appliances (ASAs) to their Cisco Web Security Appliances (WSAs).

  The simulator will provide access to the graphical user interfaces of one Cisco ASA and one Cisco WSA that are participating in a WCCP service. Not all aspects of the GUIs are implemented in the simulator. The options that have been implemented are sufficient to determine the best answer to each of the questions that are presented.

  Your task is to examine the details available in the simulated graphical user interfaces and select the best answer.

  

  

  

  

  Which of the following is true with respect to the version of WCCP configured on the Cisco ASA and the Cisco WSA?

  A. Both are configured for WCCP v1.
  B. Both are configured for WCCP v2.
  C. Both are configured for WCCP v3.
  D. There is a WCCP version mismatch between the Cisco WSA and the Cisco ASA.
  B. Both are configured for WCCP v2.

• Question 7:

  The Web Security Appliance has identities defined for faculty and staff, students, and default access. The faculty and staff identity identifies users based on the source network and authenticated credentials. The identity for students identifies users based on the source network along with successful authentication credentials. The global identity is for guest users not authenticated against the domain.

  Recently, a change was made to the organization's security policy to allow faculty and staff access to a social network website, and the security group changed the access policy for faculty and staff to allow the social networking category.

  Which are the two most likely reasons that the category is still being blocked for a faculty and staff user? (Choose two.)

  A. The user is being matched against the student policy because the user did not enter credentials.
  B. The user is using an unsupported browser so the credentials are not working.
  C. The social networking URL was entered into a custom URL category that is blocked in the access policy.
  D. The user is connected to the wrong network and is being blocked by the student policy.
  E. The social networking category is being allowed but the AVC policy is still blocking the website.
  C. The social networking URL was entered into a custom URL category that is blocked in the access policy.
  E. The social networking category is being allowed but the AVC policy is still blocking the website.

• Question 8:

  Which two conditions must you configure in an event action rule to match all IPv4 addresses in the victim range and filter on the complete subsignature range? (Choose two.)

  A. Disable event action override.
  B. Leave the victim address range unspecified.
  C. Set the subsignature ID-range to the default.
  D. Set the deny action percentage to 100.
  E. Set the deny action percentage to 0.
  B. Leave the victim address range unspecified.
  C. Set the subsignature ID-range to the default.

• Question 9:

  A network engineer may use which three types of certificates when implementing HTTPS decryption services on the ASA CX? (Choose three.)

  A. Self Signed Server Certificate
  B. Self Signed Root Certificate
  C. Microsoft CA Server Certificate
  D. Microsoft CA Subordinate Root Certificate
  E. LDAP CA Server Certificate
  F. LDAP CA Root Certificate
  G. Public Certificate Authority Server Certificate
  H. Public Certificate Authority Root Certificate
  B. Self Signed Root Certificate
  D. Microsoft CA Subordinate Root Certificate
  F. LDAP CA Root Certificate

• Question 10:

  What are three benefits of the Cisco AnyConnect Secure Mobility Solution? (Choose three.)

  A. It can protect against command-injection and directory-traversal attacks.
  B. It provides Internet transport while maintaining corporate security policies.
  C. It provides secure remote access to managed computers.
  D. It provides clientless remote access to multiple network-based systems.
  E. It enforces security policies, regardless of the user location.
  F. It uses ACLs to determine best-route connections for clients in a secure environment.
  B. It provides Internet transport while maintaining corporate security policies.
  C. It provides secure remote access to managed computers.
  E. It enforces security policies, regardless of the user location.