Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 211:

  Which type of Cisco IPS deployment are you using if you are monitoring traffic with a SPAN port?

  A. Bypass deployment
  B. Tap mode deployment
  C. Passive deployment
  D. Inline deployment
  C. Passive deployment

• Question 212:

  When using Cisco FirePOWFR Services for ASA, how is traffic directed form based Cisco ASA to the CiscoPOWER Services?

  A. SPAN port on a Cisco Catalyst switch.
  B. WCCP on the ASA.
  C. inline interface pair on the Cisco FirePOWER module.
  D. service policy on the ASA.
  D. service policy on the ASA.

• Question 213:

  

  

  

  

  

  

  

  

  

  

  

  

  For which domains will the Cisco Email Security Appliance allow up to 5000 recipients per message?

  A. violet.public
  B. violet.public and blue.public
  C. violet.public, blue.public and green.public
  D. red.public
  E. orange.public
  F. red.public and orange.public
  E. orange.public

  ---

  Here we see that the TRUSTED policy is being throttled to 5000 recipients per message.

  

  Image%2075

  By looking at the HAT policy we see that the TRUSTED policy applies to the WHITELIST sender group.

  

  Image 27

  By clicking on the WHITELIST sender group we can see that orange.public is listed as the sender.

  

  Capture

• Question 214:

  Which three zones are used for anomaly detection in a Cisco IPS? (Choose three.)

  A. internal zone
  B. external zone
  C. illegal zone
  D. inside zone
  E. outside zone
  F. DMZ zone
  A. internal zone
  B. external zone
  C. illegal zone

• Question 215:

  Which command is used on the cisco firepower threat defense to send logs to cisco tac?

  A. sudo_
  B. tac
  B. tac

• Question 216:

  In cisco firePOWER 5.x and 6.0, which type of traffic causes a web page to be displayed by the appliance when Block or Interactive Block is selected as an access control action?

  A. FTP
  B. decrypted HTTP
  C. encrypted HTTP
  D. unencrypted HHTP
  D. unencrypted HHTP

• Question 217:

  Which role does Passive Identity Management play in the Cisco Cloud Web Security architecture?

  A. It provides user-level information that is received from Active Directory.
  B. It enables the administrator to control web access for users and user groups.
  C. It defines a standard for exchanging authentication and authorization data.
  D. It controls content that passes into and out of the network.
  A. It provides user-level information that is received from Active Directory.

• Question 218:

  Which Cisco ASA SSL VPN feature provides support for PCI compliance by allowing for the validation of two sets of username and password credentials on the SSL VPN login page?

  A. Single Sign-On
  B. Certificate to Profile Mapping
  C. Double Authentication
  D. RSA OTP
  D. RSA OTP

• Question 219:

  Which interface on the Cisco Email Security Appliance has HTTP and SSH enabled by default?

  A. data 1
  B. data 2
  C. management 1
  D. all interfaces
  A. data 1

• Question 220:

  Which option is the main function of the Cisco CWS Connector on mobile devices?

  A. it provides a connection to the FireAMP cloud to block threats that other security layers fail to detect.
  B. it integrates with the Cisco AnyConnect Secure Mobility Client to provide web security.
  C. it integrates with the Cisco NAC Agent to collect web-browser history for reporting purposes.
  D. it integrates with the Cisco Firepower Management Console to manage application and web traffic.
  B. it integrates with the Cisco AnyConnect Secure Mobility Client to provide web security.