Cisco 300-207 Online Practice Questions and Exam Preparation

Cisco 300-207 Online Questions & Answers

• Question 111:

  Who or what calculates the signature fidelity rating in a Cisco IPS?

  A. the signature author
  B. Cisco Professional Services
  C. the administrator
  D. the security policy
  A. the signature author

• Question 112:

  

  

  Correct Answer. Steps are in below
  Steps are in below

  ---

  First, enable the Gig 0/0 and Gig 0/1 interfaces:

  

  Second, create the pair under the “interface pairs” taB.

  

  Then, apply the HIGHRISK action rule to the newly created interface pair:

  

  Then apply the same for the MEDIUMRISK traffic (deny attacker inline)

  

  Finally. Log the packets for the LOWRICK event:

  

  When done it should look like this:

  

  

• Question 113:

  Which Cisco ESA component receives connections from external mail servers?

  A. MTA
  B. public listener
  C. private listener
  D. recipient access table
  E. SMTP incoming relay agent
  B. public listener

• Question 114:

  Which three sender reputation ranges identify the default behavior of the Cisco Email Security Appliance? (Choose three.)

  A. If it is between -1 and +10, the email is accepted
  B. If it is between +1 and +10, the email is accepted
  C. If it is between -3 and -1, the email is accepted and additional emails from the sender are throttled
  D. If it is between -3 and +1, the email is accepted and additional emails from the sender are throttled
  E. If it is between -4 and +1, the email is accepted and additional emails from the sender are throttled
  F. If it is between -10 and -3, the email is blocked
  G. If it is between -10 and -3, the email is sent to the virus and spam engines for additional scanning
  H. If it is between -10 and -4, the email is blocked
  A. If it is between -1 and +10, the email is accepted
  C. If it is between -3 and -1, the email is accepted and additional emails from the sender are throttled
  F. If it is between -10 and -3, the email is blocked

• Question 115:

  

  Which signature definition is virtual sensor 0 assigned to use?

  A. rules0
  B. vs0
  C. sig0
  D. ad0
  E. ad1
  F. sigl
  C. sig0

• Question 116:

  Which feature does Acceptable Use Controls use to implement Cisco AVC?

  A. ISA
  B. Cisco Web Usage Controls
  C. Cisco WSA D. Cisco ESA
  B. Cisco Web Usage Controls

• Question 117:

  What can Cisco Prime Security Manager (PRSM) be used to achieve?

  A. Configure and Monitor Cisco CX Application Visibility and Control, web filtering, access and decryption policies
  B. Configure Cisco ASA connection limits
  C. Configure TCP state bypass in Cisco ASA and IOS
  D. Configure Cisco IPS signature and monitor signature alerts
  E. Cisco Cloud Security on Cisco ASA
  A. Configure and Monitor Cisco CX Application Visibility and Control, web filtering, access and decryption policies

• Question 118:

  Which option describes a customer benefit of the Cisco Security IntelliShield Alert Manager?

  A. It provides access to threat and vulnerability information for Cisco related products only.
  B. It consolidates vulnerability information from an internal Cisco source, which allows security personnel to focus on remediation and proactive protection versus research.
  C. It provides effective and timely security intelligence via early warnings about new threats and technology vulnerabilities.
  D. It enhances the efficiency of security staff with accurate, noncustomizable threat intelligence, critical remediation information, and easy-to-use workflow tools.
  C. It provides effective and timely security intelligence via early warnings about new threats and technology vulnerabilities.

• Question 119:

  Which three pieces of information are required to implement transparent user identification using Context Directory Agent? (Choose three.)

  A. the server name of the global catalog domain controller
  B. the server name where Context Directory Agent is installed
  C. the backup Context Directory Agent
  D. the primary Context Directory Agent
  E. the shared secret
  F. the syslog server IP address
  B. the server name where Context Directory Agent is installed
  D. the primary Context Directory Agent
  E. the shared secret

• Question 120:

  How does a user access a Cisco Web Security Appliance for initial setup?

  A. Connect the console cable and use the terminal at 9600 baud to run the setup wizard.
  B. Connect the console cable and use the terminal at 115200 baud to run the setup wizard.
  C. Open the web browser at 192.168.42.42:8443 for the setup wizard over https.
  D. Open the web browser at 192.168.42.42:443 for the setup wizard over https.
  C. Open the web browser at 192.168.42.42:8443 for the setup wizard over https.