Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 121:

  An engineer is configuring cisco ESA with a multilayer approach to fight virus and malware. Which two features can be used to fulfill that task?

  A. Outbreak filters
  B. White list
  C. RAT
  D. DLP
  E. Sophos engine
  A. Outbreak filters
  E. Sophos engine

• Question 122:

  What is the primary benefit of deploying an ESA in hybrid mode?

  A. It provides email security supported the transition to the cloud.
  B. It provides protection and control of outbound messages.
  C. It provides the maximum protection and control of outbound messages.
  D. It provides the lowest total cost of ownership by reducing the need for physical appliances.
  E. You can fine-tune its settings to provide the optimum balance between security and performance for your environment
  A. It provides email security supported the transition to the cloud.

• Question 123:

  Which detection method is also known as machine learning on Network-based Cisco Advanced Malware Protection?

  A. custom file detection
  B. hashing
  C. Spero engine
  D. dynamic analysis
  C. Spero engine

• Question 124:

  

  

  A. Check the answer below
  A. Check the answer below

  ---

  Answer: Review the explanation part for full solution. We need to define the parameter map, specifying port 8080 for http and https and define the servers and the license:

  Branch-ISR#config t

  Branch-ISR(config)# parameter-map type content-scan global Branch-ISR(config-profile)#server scansafe primary name proxy-a.scansafe.net port http 8080 https 8080

  Branch-ISR(config-profile)#server scansafe secondary name proxy-b.scansafe.net port http 8080 https 8080

  Branch-ISR(config-profile)#license 0 0123456789abcdef

  If the CWS proxy servers are not available, we traffic should be denied. This is done by the following configuration:

  Branch-ISR(config-profile)#server scansafe on-failure block-all

  Now we need to apply this to the fastethernet 0/1 interface outbound:

  Branch-ISR(config)#interface Fastethernet 0/1

  Branch-ISR(config-if)#content-scan outbound

  Branch-ISR(config-if)#exit

  Branch-ISR(config)#exit

  Finally, we can verify out configuration by using the "show content-scan summary command:

  Branch-ISR#show content-scan summary

  Primary: 72.37.244.203(Up)*

  Secondary: 70.39.231.99 (Up)

  Interfaces: Fastethernet0/1

• Question 125:

  Which step is required when you configure URL filtering to Cisco Cloud Web Security?

  A. configure URL filtering policies in Cisco ScanCenter
  B. install the ASA FirePOWER module on the Cisco ASA.
  C. Implement Next Generation IPS instrusion rules.
  D. Configure URL filtering criteria in the Cisco ASA FirePOWER access rules.
  A. configure URL filtering policies in Cisco ScanCenter

• Question 126:

  Remote clients have reported application slowness. The remote site has one circuit that is highly utilized and a second circuit with nearly zero utilization. The business unit has asked to have applications load shared over two WAN links. An engineer has decided to deploy cisco Application Visibility and Control to better utilize the existing WAN links and to understand the traffic flows. Which configuration provides application deep packet inspection?

  A. IP accounting
  B. NBAR2
  C. RMON
  D. SNMP
  B. NBAR2

• Question 127:

  Refer to the following. What type of password is "cisco"?

  Router(config)#service password-encryption

  Router(config)#username admin password cisco

  A. Enhanced
  B. CHAP
  C. Type 7
  D. Type 0
  C. Type 7

• Question 128:

  Which Cisco ESA predefined sender group uses parameter-matching to reject senders?

  A. WHITELIST
  B. BLACKLIST
  C. UNKNOWNLIST
  D. SUSPECTLIST
  B. BLACKLIST

• Question 129:

  Which cloud-based malware detection engine uses machine-learning detection techniques in the Cisco Advanced Malware Protection cloud?

  A. third-party detections
  B. Spero
  C. Ethos
  D. Memcache
  B. Spero

• Question 130:

  Which information does the show scansafe statistics command provide?

  A. ESA message tracking
  B. PRSM events
  C. AV statistics
  D. Cisco CWS activity
  D. Cisco CWS activity