Cisco 300-207 Online Practice Questions and Exam Preparation

Cisco 300-207 Online Questions & Answers

• Question 121:

  A Cisco Web Security Appliance's policy can provide visibility and control of which two elements? (Choose two.)

  A. Voice and Video Applications
  B. Websites with a reputation between -100 and -60
  C. Secure websites with certificates signed under an unknown CA
  D. High bandwidth websites during business hours
  C. Secure websites with certificates signed under an unknown CA
  D. High bandwidth websites during business hours

• Question 122:

  What CLI command configures IP-based access to restrict GUI and CLI access to a Cisco Email Security appliance's administrative interface?

  A. adminaccessconfig
  B. sshconfig
  C. sslconfig
  D. ipaccessconfig
  A. adminaccessconfig

• Question 123:

  In order to set up HTTPS decryption on the Cisco Web Security Appliance, which two steps must be performed? (Choose two.)

  A. Enable and accept the EULA under Security Services > HTTPS Proxy.
  B. Upload a publicly signed server certificate.
  C. Configure or upload a certificate authority certificate.
  D. Enable HTTPS decryption in Web Security Manager > Access Policies.
  A. Enable and accept the EULA under Security Services > HTTPS Proxy.
  C. Configure or upload a certificate authority certificate.

• Question 124:

  An ASA with an IPS module must be configured to drop traffic matching IPS signatures and block all traffic if the module fails. Which describes the correct configuration?

  A. Inline Mode, Permit Traffic
  B. Inline Mode, Close Traffic
  C. Promiscuous Mode, Permit Traffic
  D. Promiscuous Mode, Close Traffic
  B. Inline Mode, Close Traffic

• Question 125:

  Which three options are valid event actions for a Cisco IPS? (Choose three.)

  A. deny-packet-inline
  B. deny-attack-reset
  C. produce-verbose-alert
  D. log-attacker-packets
  E. deny-packet-internal
  F. request-block-drop-connection
  A. deny-packet-inline
  C. produce-verbose-alert
  D. log-attacker-packets

• Question 126:

  Refer to the exhibit.

  

  When designing the network to redirect web traffic utilizing the Catalyst 6500 to the Cisco Web Security Appliance, impact on the switch platform needs consideration. Which four rows identify the switch behavior in correlation to the redirect method? (Choose four.)

  A. Row 1
  B. Row 2
  C. Row 3
  D. Row 4
  E. Row 5
  F. Row 6
  G. Row 7
  H. Row 8
  B. Row 2
  C. Row 3
  F. Row 6
  G. Row 7

• Question 127:

  A system administrator wants to know if the email traffic from a remote partner will activate special treatment message filters that are created just for them. Which tool on the Cisco Email Security gateway can you use to debug or emulate the flow that a message takes through the work queue?

  A. the message tracker interface
  B. centralized or local message tracking
  C. the CLI findevent command
  D. the trace tool
  E. the CLI grep command
  D. the trace tool

• Question 128:

  Which three statements about Cisco CWS are true? (Choose three.)

  A. It provides protection against zero-day threats.
  B. Cisco SIO provides it with threat updates in near real time.
  C. It supports granular application policies.
  D. Its Roaming User Protection feature protects the VPN from malware and data breaches.
  E. It supports local content caching.
  F. Its Cognitive Threat Analytics feature uses cloud-based analysis and detection to block threats outside the network.
  A. It provides protection against zero-day threats.
  B. Cisco SIO provides it with threat updates in near real time.
  C. It supports granular application policies.

• Question 129:

  Which role does Passive Identity Management play in the Cisco Cloud Web Security architecture?

  A. It provides user-level information that is received from Active Directory.
  B. It enables the administrator to control web access for users and user groups.
  C. It defines a standard for exchanging authentication and authorization data.
  D. It controls content that passes into and out of the network.
  A. It provides user-level information that is received from Active Directory.

• Question 130:

  Which is the default IP address and admin port setting for https in the Cisco Web Security Appliance?

  A. http://192.168.42.42:8080
  B. http://192.168.42.42:80
  C. https://192.168.42.42:443
  D. https://192.168.42.42:8443
  D. https://192.168.42.42:8443