Cisco 300-207 Online Practice Questions and Exam Preparation

Cisco 300-207 Online Questions & Answers

• Question 101:

  What are three arguments that can be used with the show content-scan command in Cisco IOS software? (Choose three)

  A. session
  B. data
  C. verbose
  D. buffer
  E. summary
  F. statistics
  A. session
  E. summary
  F. statistics

• Question 102:

  

  

  What action will the sensor take regarding IP addresses listed as known bad hosts in the Cisco SensorBase network?

  A. Global correlation is configured in Audit mode fortesting the feature without actually denying any hosts.
  B. Global correlation is configured in Aggressive mode, which has a very aggressive effect on deny actions.
  C. It will not adjust risk rating values based on the known bad hosts list.
  D. Reputation filtering is disabled.
  D. Reputation filtering is disabled.

• Question 103:

  Which Cisco technology provides spam filtering and email protection?

  A. IPS
  B. ESA
  C. WSA
  D. CX
  B. ESA

• Question 104:

  Which Cisco Cloud Web Security Connector feature allows access by all of an organization's users while applying Active Directory group policies?

  A. a company authentication key
  B. a group authentication key
  C. a PAC file
  D. proxy forwarding
  E. a user authentication key
  A. a company authentication key

• Question 105:

  During initial configuration, the Cisco ASA can be configured to drop all traffic if the ASA CX SSP fails by using which command in a policy-map?

  A. cxsc fail
  B. cxsc fail-close
  C. cxsc fail-open
  D. cxssp fail-close
  B. cxsc fail-close

• Question 106:

  What are two features of the Cisco ASA NGFW? (Choose two.)

  A. It can restrict access based on qualitative analysis.
  B. It can restrict access based on reputation.
  C. It can reactively protect against Internet threats.
  D. It can proactively protect against Internet threats.
  B. It can restrict access based on reputation.
  D. It can proactively protect against Internet threats.

• Question 107:

  Which Cisco ESA predefined sender group uses parameter-matching to reject senders?

  A. BLACKLIST
  B. WHITELIST
  C. SUSPECTLIST
  D. UNKNOWNLIST
  A. BLACKLIST

• Question 108:

  Which antispam technology assumes that email from server A, which has a history of distributing spam, is more likely to be spam than email from server B, which does not have a history of distributing spam?

  A. Reputation-based filtering
  B. Context-based filtering
  C. Cisco ESA multilayer approach
  D. Policy-based filtering
  A. Reputation-based filtering

• Question 109:

  Which three statements about Cisco ASA CX are true? (Choose three.)

  A. It groups multiple ASAs as a single logical device.
  B. It can perform context-aware inspection.
  C. It provides high-density security services with high availability.
  D. It uses policy-based interface controls to inspect and forward TCP- and UDP-based packets.
  E. It can make context-aware decisions.
  F. It uses four cooperative architectural constructs to build the firewall.
  B. It can perform context-aware inspection.
  E. It can make context-aware decisions.
  F. It uses four cooperative architectural constructs to build the firewall.

• Question 110:

  What command alters the SSL ciphers used by the Cisco Email Security Appliance for TLS sessions and HTTPS access?

  A. sslconfig
  B. sslciphers
  C. tlsconifg
  D. certconfig
  A. sslconfig