Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 161:

  Which two services must remain as on-premises equipment when deploying a hybrid email solution? (Choose two)

  A. DDoS
  B. antispam
  C. encryption
  D. DLP
  E. antivirus
  C. encryption
  D. DLP

• Question 162:

  Which two routing options are valid with Cisco firepower threat Defense version 6.0?(choose two)

  A. ECMP with up to three equal cost paths across multiple interfaces
  B. BGPv6
  C. BGPv4 with nonstop forwarding
  D. BGPv4 unicast address family
  E. ECMP with up to four equal cost paths
  A. ECMP with up to three equal cost paths across multiple interfaces
  B. BGPv6

• Question 163:

  Which two are valid suppression types on a Cisco Next Generation Intrusion Prevention System?

  A. Port
  B. Rule
  C. Source
  D. Application
  E. Protocol
  B. Rule
  C. Source

• Question 164:

  Users are unable to reach the internet. Using CLI, access the ASA to troubleshoot the WCCP connection between the ASA and WSA.

  A. Check redirection debug logs for HIA messages and ISY replies.
  B. Check connectivity using the ping command.
  C. Disable WCCP and see if that is the problem
  D. Other option
  A. Check redirection debug logs for HIA messages and ISY replies.

• Question 165:

  The Web Cache Communication Protocol (WCCP) is a content-routing protocol that can facilitate the redirection of traffic flows in real time. Your organization has deployed WCCP to redirect web traffic that traverses their Cisco Adaptive Security Appliances (ASAs) to their Cisco Web Security Appliances (WSAs).

  The simulator will provide access to the graphical user interfaces of one Cisco ASA and one Cisco WSA that are participating in a WCCP service. Not all aspects of the GUIs are implemented in the simulator. The options that have been implemented are sufficient to determine the best answer to each of the questions that are presented.

  Your task is to examine the details available in the simulated graphical user interfaces and select the best answer.

  

  

  

  Between the Cisco ASA configuration and the Cisco WSA configuration, what is true with respect to redirected ports?

  A. Both are configured for port 80 only.
  B. Both are configured for port 443 only.
  C. Both are configured for both port 80 and 443.
  D. Both are configured for ports 80, 443 and 3128.
  E. There is a configuration mismatch on redirected ports.
  C. Both are configured for both port 80 and 443.

  ---

  This can be seen from the WSA Network tab shown below: This can be seen from the WSA Network tab shown below:

  

• Question 166:

  What can Cisco Prime Security Manager (PRSM) be used to achieve?

  A. Configure and Monitor Cisco CX Application Visibility and Control, web filtering, access and decryption policies
  B. Configure Cisco ASA connection limits
  C. Configure TCP state bypass in Cisco ASA and IOS
  D. Configure Cisco IPS signature and monitor signature alerts
  E. Cisco Cloud Security on Cisco ASA
  A. Configure and Monitor Cisco CX Application Visibility and Control, web filtering, access and decryption policies

• Question 167:

  An engineer is configuring a Cisco Email Security Appliance (ESA) and chooses "Preferred" as the settings for TLS on a HAT Mail Flow Policy. Which result occurs?

  A. TLS is allowed for outgoing connections to MTAs. Connection to the listener require encrypted Simple Mail Transfer Protocol conversations
  B. TLS is allowed for incoming connections to the listener from MTAs, even after a STARTTLS command received
  C. TLS is allowed for incoming connections to the listener from MTAs. Until a STARTTLS command received, the ESA responds with an error message to every command other than No Option, EHLO, or QUIT.
  D. TLS is allowed for outgoing connections to the listener from MTAs. Until a STARTTLS command received, the ESA responds with an error message to every command other than No Option (NOOP), EHLO, or QUIT.
  C. TLS is allowed for incoming connections to the listener from MTAs. Until a STARTTLS command received, the ESA responds with an error message to every command other than No Option, EHLO, or QUIT.

• Question 168:

  Which three protocols are required when considering firewall rules email services using a Cisco Email Security Appliance?

  A. HTTP
  B. SMTP
  C. TFTP
  D. FTP
  E. DNS
  F. SNMP
  A. HTTP
  B. SMTP
  E. DNS

• Question 169:

  Which two Cisco ASA commands show if traffic is being redirected to the Cisco Firepower module? (Choose two)

  A. show service-policy sfr
  B. show module sfr
  C. show service-policy
  D. show module sfr detail
  E. show service-policy inspect scansafe
  A. show service-policy sfr
  B. show module sfr

• Question 170:

  What is a feature of Cisco Hybrid Email Security?

  A. roaming user protection
  B. Cisco Registered Envelope Service
  C. Layer 4 traffic monitoring
  D. application visibility and control
  A. roaming user protection