Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 201:

  You have configured a VLAN pair that is connected to a switch that is unable to pass traffic. If the IPS is configured correctly, which additional configuration must you perform to enable the switch to pass traffic?

  A. Configure access ports on the switch.
  B. Configure the trunk port on the switch.
  C. Enable IP routing on the switch.
  D. Enable ARP inspection on the switch.
  A. Configure access ports on the switch.

• Question 202:

  What is a value that Cisco ESA can use for tracing mail flow?

  A. the source IP address
  B. the FQDN of the destination IP address
  C. the destination IP address
  D. the FQDN of the source IP address
  D. the FQDN of the source IP address

• Question 203:

  With Cisco FirePOWER Threat Defense software, which interface mode do you configure to passively receive traffic that passes the appliance?

  A. transparent
  B. routed
  C. passive
  D. inline set
  E. inline tap
  C. passive

• Question 204:

  Connections are being denied because of SenderBase Reputation Scores. Which two features must be enabled in order to record those connections in the mail log on the Cisco ESA? (Choose two.)

  A. Rejected Connection Handling
  B. Domain Debug Logs
  C. Injection Debug Logs
  D. Message Tracking
  A. Rejected Connection Handling
  D. Message Tracking

• Question 205:

  A new Cisco IPS device has been placed on the network without prior analysis. Which CLI command shows the most fired signature?

  A. Show statistics virtual-sensor
  B. Show event alert
  C. Show alert
  D. Show version
  A. Show statistics virtual-sensor

• Question 206:

  A system administrator wants to know if the email traffic from a remote partner will activate special treatment message filters that are created just for them. Which tool on the Cisco Email Security gateway can you use to debug or emulate the flow that a message takes through the work queue?

  A. the message tracker interface
  B. centralized or local message tracking
  C. the CLI findevent command
  D. the trace tool
  E. the CLI grep command
  D. the trace tool

• Question 207:

  Which two actions can be used in an access control policy rule?

  A. Block All
  B. Monitor
  C. Trust Rule
  D. Discover
  E. Block with Reset
  B. Monitor
  E. Block with Reset

  ---

  https://www.cisco.com/c/en/us/td/docs/security/firepower/601/configuration/guide/fpmc-config-guide-v601/Getting_Started_with_Access_Control_Policies.pdf

• Question 208:

  Drag and drop the Cisco ASA Firepower module preprocessors from the left onto the correct definitions on the right.

  Select and Place:

  

  

• Question 209:

  An engineer is using policy trace tool to debug how a message is processed by the ESA. Which option is the expected behavior from the tool?

  A. The sections of configuration tested by the tool are performed in a random order.
  B. A message body cannot be populated via an upload.
  C. The test message created by the tool is distributed.
  D. A message is emulated as being accepted by a listener
  D. A message is emulated as being accepted by a listener

  ---

  https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118102-troubleshoot-esa-00.html

• Question 210:

  Which three pieces of information are required to implement transparent user identification using Context Directory Agent? (Choose three.)

  A. the server name of the global catalog domain controller
  B. the server name where Context Directory Agent is installed
  C. the backup Context Directory Agent
  D. the primary Context Directory Agent
  E. the shared secret
  F. the syslog server IP address
  B. the server name where Context Directory Agent is installed
  D. the primary Context Directory Agent
  E. the shared secret