Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 181:

  An engineer must architect an AMP private cloud deployment. What is the benefit of running in air-gaped mode?

  A. Internet connection is not required for disposition.
  B. Database sync time is reduced.
  C. Disposition queries are done on AMP appliances.
  D. A dedicated server is needed to run amp-sync.
  D. A dedicated server is needed to run amp-sync.

• Question 182:

  What are two arguments that can be used with the show content-scan command in Cisco IOS software? (Choose two. )

  A. data
  B. session
  C. buffer
  D. statistics
  E. verbose
  B. session
  D. statistics

• Question 183:

  Which two statements regarding the basic setup of the Cisco CX for services are correct? (Choose two.)

  A. The Packet capture feature is available for either permitted or dropped packets by default.
  B. Public Certificates can be used for HTTPS Decryption policies.
  C. Public Certificates cannot be used for HTTPS Decryption policies.
  D. When adding a standard LDAP realm, the group attribute will be UniqueMember.
  E. The Packet capture features is available for permitted packets by default.
  C. Public Certificates cannot be used for HTTPS Decryption policies.
  E. The Packet capture features is available for permitted packets by default.

• Question 184:

  Which two characteristics represent a Cisco device operating in tap mode?

  A. It analyzes copies of packets from the packet flow.
  B. The packet flow traverses the device.
  C. The device is deployment in a passive configuration.
  D. If a rule Is triggered, the device drops the packet.
  E. If a rule is triggered, the device generates an intrusion event
  A. It analyzes copies of packets from the packet flow.
  D. If a rule Is triggered, the device drops the packet.

• Question 185:

  Which port is used for CLI Secure shell access?

  A. Port 23
  B. Port 25
  C. Port 22
  D. Port 443
  C. Port 22

• Question 186:

  Which are two requirements for configuration a routed interface in a firepower SD840 sensor?

  A. Virtual router
  B. An interface
  C. IP address
  D. 10 G
  E. 1 G
  B. An interface
  C. IP address

• Question 187:

  Which statement regarding hashing is correct?

  A. MD5 produces a 64-bit message digest
  B. SHA-1 produces a 160-bit message digest
  C. MD5 takes more CPU cycles to compute than SHA-1.
  D. Changing 1 bit of the input to SHA-1 can change up to 5 bits in the output.
  B. SHA-1 produces a 160-bit message digest

• Question 188:

  Which two configuration steps are required for implementing SSH for management access to a

  Cisco router? (Choose two.)

  A. Configuring the SSH version with the ip ssh version 2 command.
  B. Generating RSA key pairs with the crypto key generate rsa command.
  C. Enabling AAA for authentication, authorization, and accounting with the aaa new-model command.
  D. Enabling SSH transport with the transport input ssh command.
  E. Configuring a domain name with the ip domain-name [name] command.
  D. Enabling SSH transport with the transport input ssh command.
  E. Configuring a domain name with the ip domain-name [name] command.

  ---

  Reference: http://www.cisco.com/c/en/us/support/docs/security-vpn/secure-shell- ssh/4145ssh.html

• Question 189:

  You ran the ssh generate-key command on the Cisco IPS and now administrators are unable to connect. Which action can be taken to correct the problem?

  A. Replace the old key with a new key on the client.
  B. Run the ssh host-key command.
  C. Add the administrator IP addresses to the trusted TLS host list on the IPS.
  D. Run the ssh authorized-keys command.
  A. Replace the old key with a new key on the client.

• Question 190:

  Which three webtype ACL statements are correct? (Choose three.)

  A. are assigned per-Connection Profile
  B. are assigned per-user or per-Group Policy
  C. can be defined in the Cisco AnyConnect Profile Editor
  D. supports URL pattern matching
  E. supports implicit deny all at the end of the ACL
  F. supports standard and extended webtype ACLs
  B. are assigned per-user or per-Group Policy
  D. supports URL pattern matching
  E. supports implicit deny all at the end of the ACL