Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 11:

  Which Cisco technology combats viruses and malware with virus outbreak filters that are downloaded from Cisco SenderBase?

  A. ASA
  B. WSA
  C. Secure mobile access
  D. IronPort ESA
  E. SBA
  D. IronPort ESA

• Question 12:

  Refer to the following:

  R01(config)#ip wccp web-cache redirect-list 80 password-local

  A. Traffic denied in prefix-list 80 is redirected to the Cisco WSA
  B. The default "cisco" password is configured on the Cisco WSA
  C. Traffic permitted in access-list 80 is redirected to the Cisco WSA
  D. Traffic using TCP port 80 is redirected to the Cisco WSA
  C. Traffic permitted in access-list 80 is redirected to the Cisco WSA

• Question 13:

  The Web Security Appliance has identities defined for faculty and staff, students, and default access. The faculty and staff identity identifies users based on the source network and authenticated credentials. The identity for students identifies users based on the source network along with successful authentication credentials. The global identity is for guest users not authenticated against the domain. Recently, a change was made to the organization's security policy to allow faculty and staff access to a social network website, and the security group changed the access policy for faculty and staff to allow the social networking category.

  Which are the two most likely reasons that the category is still being blocked for a faculty and staff user? (Choose two.)

  A. The user is being matched against the student policy because the user did not enter credentials.
  B. The user is using an unsupported browser so the credentials are not working.
  C. The social networking URL was entered into a custom URL category that is blocked in the access policy.
  D. The user is connected to the wrong network and is being blocked by the student policy.
  E. The social networking category is being allowed but the AVC policy is still blocking the website.
  C. The social networking URL was entered into a custom URL category that is blocked in the access policy.
  E. The social networking category is being allowed but the AVC policy is still blocking the website.

• Question 14:

  Which three zones are used for anomaly detection? (Choose three.)

  A. Internal zone
  B. External zone
  C. Illegal zone
  D. Inside zone
  E. Outside zone F. DMZ zone
  A. Internal zone
  B. External zone
  C. Illegal zone

• Question 15:

  Which two appliances support logical routed interfaces? (Choose two.)

  A. FirePOWER services for ASA-5500-X
  B. FP-4100-series
  C. FP-8000-series
  D. FP-7000-series
  E. FP-9300-series
  C. FP-8000-series
  D. FP-7000-series

  ---

  https://www.cisco.com/c/en/us/td/docs/security/firepower/hw/firepower_device/firepower_7k8k_de vice/deployment.html

  

  https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118021-technote-firesight-00.html

  

• Question 16:

  With Cisco AMP for Endpoints on Windows, which three engines are available in the connector? (Choose three. )

  A. Ethos
  B. Tetra
  C. Annos
  D. Spero
  E. Talos
  F. ClamAV
  A. Ethos
  B. Tetra
  D. Spero

  ---

  http://www.cisco.com/c/en/us/products/collateral/security/fireamp-private-cloud-virtual-appliance/datasheet-c78-733180.html

• Question 17:

  Which action is possible when a signature is triggered on the Cisco IOS IPS?

  A. Deny all packets with the same source address
  B. Send an email via SMTP to the administrator
  C. Deny all packets with the same port destination
  D. Send an SNMP alert to a monitoring system
  A. Deny all packets with the same source address

• Question 18:

  Heartbeats are used to maintain the high-availability status of an application. Which factor is most important?

  A. Latency
  A. Latency

• Question 19:

  A security engineer is configuring user identity for the Cisco ASA connector for Cisco CWS. How many AAA server groups must the engineer configure?

  A. 1
  B. 3
  C. 4
  D. 2
  D. 2

• Question 20:

  Which statement describes a traffic profile on a Cisco Next Generation Intrusion Prevention System?

  A. It allows traffic if it does not meet the profile.
  B. It defines a traffic baseline for traffic anomaly deduction.
  C. It inspects hosts that meet the profile with more intrusion rules.
  D. It blocks traffic if it does not meet the profile.
  C. It inspects hosts that meet the profile with more intrusion rules.