Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 131:

  Which Cisco IPS deployment mode is best suited for bridged interfaces?

  A. inline interface pair mode
  B. inline VLAN pair mode
  C. inline VLAN group mode
  D. inline pair mode
  B. inline VLAN pair mode

• Question 132:

  Which Cisco Web Security Appliance feature enables the appliance to block suspicious traffic on all of its ports and IP addresses?

  A. explicit forward mode
  B. Layer 4 Traffic Monitor
  C. transparent mode
  D. Secure Web Proxy
  C. transparent mode

• Question 133:

  r01(config)#ip wccp web-cache redirect-list 80 password local

  Refer to the above. What can be determined from this router configuration command for Cisco

  WSA?

  A. Traffic using TCP port 80 is redirected to the Cisco WSA.
  B. The default "cisco" password is configured on the Cisco WSA.
  C. Traffic denied in prefix-list 80 is redirected to the Cisco WSA.
  D. Traffic permitted in access-list 80 is redirected to the Cisco WSA.
  D. Traffic permitted in access-list 80 is redirected to the Cisco WSA.

• Question 134:

  The Web Cache Communication Protocol (WCCP) is a content-routing protocol that can facilitate the redirection of traffic flows in real time. Your organization has deployed WCCP to redirect web traffic that traverses their Cisco Adaptive Security Appliances (ASAs) to their Cisco Web Security Appliances (WSAs).

  The simulator will provide access to the graphical user interfaces of one Cisco ASA and one Cisco WSA that are participating in a WCCP service. Not all aspects of the GUIs are implemented in the simulator. The options that have been implemented are sufficient to determine the best answer to each of the questions that are presented.

  Your task is to examine the details available in the simulated graphical user interfaces and select the best answer.

  

  

  

  Between the Cisco ASA configuration and the Cisco WSA configuration, what is true with respect to redirected ports?

  A. Both are configured for port 80 only.
  B. Both are configured for port 443 only.
  C. Both are configured for both port 80 and 443.
  D. Both are configured for ports 80, 443 and 3128.
  E. There is a configuration mismatch on redirected ports.
  C. Both are configured for both port 80 and 443.

  ---

  This can be seen from the WSA Network tab shown below:

  

• Question 135:

  An engineer must deploy email security to a large enterprise with multiple offices. Each office cannot support its own ESA appliance. What technology best supports email security across the organization?

  A. Cloud Email Security
  B. Hybrid Email Security
  C. Virtual Email Security Appliance
  D. Physical Email Security Appliance
  B. Hybrid Email Security

• Question 136:

  A network security design engineer is considering using a Cisco Intrusion Detection System in the DMZ of the network. Which option is the drawback to using IDS in the DMZ as opposed to using Intrusion Prevention System?

  A. Sensors, when placed in-line, can impact network functionality during sensor failure.
  B. IDS has impact on the network (that is, latency and jitter).
  C. Response actions cannot stop triggered packet or guarantee to stop a connection techniques.
  D. Response actions cannot stop malicious packets or cannot guarantee to stop any DOS attack.
  B. IDS has impact on the network (that is, latency and jitter).

• Question 137:

  Which version of AsyncOS for web is required to deploy the Web Security Appliance as a CWS connector?

  A. AsyncOS version 7.7.x
  B. AsyncOS version 7.5.x
  C. AsyncOS version 7.5.7
  D. AsyncOS version 7.5.0
  C. AsyncOS version 7.5.7

• Question 138:

  Which website can be used to validate group information about connections that flow through Cisco CWS?

  A. whoami.scansafe.net
  B. policytrace.scansafe.net
  C. whoami.scansafe.com
  D. policytrace.scansafe.com
  B. policytrace.scansafe.net

• Question 139:

  Which option represents the cisco event aggregation product?

  A. CVSS system
  B. IntelliShield
  C. ASA CX Event Viewer
  D. ASDM 7
  C. ASA CX Event Viewer

• Question 140:

  Which five system management protocols are supported by the Intrusion Prevention System? (Choose five.)

  A. SNMPv2c
  B. SNMPv1
  C. SNMPv2
  D. SNMPv3
  E. syslog
  F. SDEE
  G. SMTP
  A. SNMPv2c
  B. SNMPv1
  C. SNMPv2
  F. SDEE
  G. SMTP