Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 141:

  Which statement about the Cisco ASA botnet traffic filter is true?

  A. The four threat levels are low, moderate, high, and very high.
  B. By default, the dynamic-filter drop blacklist interface outside command drops traffic with a threat level of high or very high.
  C. Static blacklist entries always have a very high threat level.
  D. A static or dynamic blacklist entry always takes precedence over the static whitelist entry.
  C. Static blacklist entries always have a very high threat level.

• Question 142:

  Which configuration option causes an ASA with IPS module to drop traffic matching IPS signatures and to block all traffic if the module fails?

  A. Inline Mode, Permit Traffic
  B. Inline Mode, Close Traffic
  C. Promiscuous Mode, Permit Traffic
  D. Promiscuous Mode, Close Traffic
  B. Inline Mode, Close Traffic

• Question 143:

  A Cisco ASA requires an additional feature license to enable which feature?

  A. transparent firewall
  B. cut-thru proxy
  C. threat detection
  D. botnet traffic filtering
  E. TCP normalizer
  D. botnet traffic filtering

• Question 144:

  Refer to the exhibit.

  

  When designing the network to redirect web traffic utilizing the Catalyst 6500 to the Cisco Web Security Appliance, impact on the switch platform needs consideration. Which four rows identify the switch behavior in correlation to the redirect method? (Choose four.)

  A. Row 1
  B. Row 2
  C. Row 3
  D. Row 4
  E. Row 5
  F. Row 6
  G. Row 7
  H. Row 8
  B. Row 2
  C. Row 3
  F. Row 6
  G. Row 7

• Question 145:

  Which five system management protocols are supported by the Cisco Intrusion Prevention System? (Choose five.)

  A. SNMPv2c
  B. SNMPv1
  C. SNMPv2
  D. SNMPv3
  E. Syslog
  F. SDEE
  G. SMTP
  A. SNMPv2c
  B. SNMPv1
  C. SNMPv2
  F. SDEE
  G. SMTP

• Question 146:

  Who or what calculates the signature fidelity rating in a Cisco IPS?

  A. the signature author
  B. Cisco Professional Services
  C. the administrator
  D. the security policy
  A. the signature author

• Question 147:

  An engineer is configuring a cisco ESA and wants to control whether to accept or reject email messages to a messages to a recipient address. Which list contains the allowed recipient addresses?

  A. BAT
  B. HAT
  C. SAT
  D. RAT
  D. RAT

• Question 148:

  Which two conditions must you configure in an event action override to implement a risk rating of 70 or higher and terminate the connection on the IPS? (Choose two.)

  A. Configure the event action override to send a TCP reset.
  B. Set the risk rating range to 70 to 100.
  C. Configure the event action override to send a block-connection request.
  D. Set the risk rating range to 0 to 100.
  E. Configure the event action override to send a block-host request.
  A. Configure the event action override to send a TCP reset.
  B. Set the risk rating range to 70 to 100.

• Question 149:

  Which two statements about content filters on the Cisco ESA are true?(Choose two.)

  A. After you create a content filter, you can create an encryption profile to encrypt messages that match the filter.
  B. Each content filter requires one or more actions.
  C. They can be applied before a after message filters.
  D. They are applied to the message after artisan and antivirus scanning is performed.
  E. Each content filter requires one or more conditions
  D. They are applied to the message after artisan and antivirus scanning is performed.
  E. Each content filter requires one or more conditions

• Question 150:

  What CLI command configures IP-based access to restrict GUI and CLI access to a Cisco Email Security appliance's administrative interface?

  A. adminaccessconfig
  B. sshconfig
  C. sslconfig
  D. ipaccessconfig
  A. adminaccessconfig