Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 191:

  Which Cisco ASA configuration command drops traffic if the Cisco ASA CX module fails?

  A. no fail-open
  B. fail-close
  C. fail-close auth-proxy
  D. auth-proxy
  B. fail-close

• Question 192:

  Which two Cisco IPS events will generate an IP log? (Choose two.)

  A. A signature had an event action that was configured with log packets.
  B. A statically configured IP or IP network criterion was matched.
  C. A dynamically configured IP address or IP network was matched.
  D. An attack produced a response action.
  A. A signature had an event action that was configured with log packets.
  B. A statically configured IP or IP network criterion was matched.

• Question 193:

  Which four methods are used to deploy transparent mode traffic redirection? (Choose four.)

  A. PAC files
  B. Web Cache Communication Protocol
  C. policy-based routing
  D. Microsoft GPO
  E. Layer 4 switch
  F. DHCP server
  G. Layer 7 switch
  H. manual browser configuration
  B. Web Cache Communication Protocol
  C. policy-based routing
  E. Layer 4 switch
  G. Layer 7 switch

• Question 194:

  Which technology does the Cisco AMP Spero detection engineer use to identify threats?

  A. Dynamic analysis
  B. Static analysis
  C. Fuzzy shahs
  D. Machine learning
  C. Fuzzy shahs

• Question 195:

  Which Cisco Advanced Malware Protection for Endpoints analysis tool records file activity within a specific host?

  A. File Trajectory
  B. Device Trajectory
  C. File Analysis
  D. Prevalence
  B. Device Trajectory

• Question 196:

  Which policy must you edit to make changes to the Snort preprocessors?

  A. access control policy
  B. network discovery policy
  C. intrusion policy
  D. file policy
  E. network analysis policy
  A. access control policy

• Question 197:

  When a Cisco IPS is deployed in fail-closed mode, what are two conditions that can result in traffic being dropped? (Choose two.)

  A. The signature engine is undergoing the build process.
  B. The SDF failed to load.
  C. The built-in signatures are unavailable.
  D. An ACL is configured.
  A. The signature engine is undergoing the build process.
  B. The SDF failed to load.

• Question 198:

  How does the WSA policy trace tool make a request to the Proxy to emulate a client request?

  A. explicitly
  B. transparently
  C. via WCCP
  D. via policy-based routing
  D. via policy-based routing

• Question 199:

  Your corporate finance department purchased a new non-web-based TCP application tool to run on one of its servers. The finance employees need remote access to the software during non- business hours. The employees do not have "admin" privileges to their PCs. How would you configure the SSL VPN tunnel to allow this application to run?

  A. Configure a smart tunnel for the application.
  B. Configure a "finance tool" VNC bookmark on the employee clientless SSL VPN portal.
  C. Configure the plug-in that best fits the application.
  D. Configure the Cisco ASA appliance to download the Cisco AnyConnect SSL VPN client to the finance employee each time an SSL VPN tunnel is established
  A. Configure a smart tunnel for the application.

• Question 200:

  Which statement about the Cisco ASA CX role in inspecting SSL traffic is true?

  A. To decrypt traffic, the Cisco ASA CX must accept the websites' certificates as Trusted Root Cas.
  B. If the administrator elects to decrypt traffic, the Cisco ASA CX acts as a man-in--me- middle.
  C. Either all traffic is decrypted, or no traffic is decrypted by the Cisco ASA CX.
  D. The traffic is encrypted, so the Cisco ASA CX cannot determine the content of the traffic.
  B. If the administrator elects to decrypt traffic, the Cisco ASA CX acts as a man-in--me- middle.