Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 221:

  Which two pieces of information are required to implement transparent user identification using context Directory Agent? (Choose two.)

  A. the shared secret
  B. the server name where Context Directory Agent is installed
  C. the server name of the global catalog domaint controller
  D. the syslog server IP address
  A. the shared secret
  B. the server name where Context Directory Agent is installed

• Question 222:

  What type of interface is required to pass VLAN tagged traffic from one network to another on a Firepower 7125?

  A. logical switched
  B. logical routed
  C. physical switched
  D. hybrid
  E. physical routed
  A. logical switched

• Question 223:

  In the predefined URL category filtering configuration page in a cisco WSA, which two actions are valid?

  A. Restrict
  B. Guarantee
  C. Block
  D. Notification
  E. Time based
  A. Restrict
  D. Notification

• Question 224:

  Which two commands are used to verify that CWS redirection is working on a Cisco ASA appliance? (Choose two.)

  A. show scansafe statistics
  B. show webvpn statistics
  C. show service-policy inspect scansafe
  D. show running-config scansafe
  E. show running-config webvpn
  F. show url-server statistics
  A. show scansafe statistics
  C. show service-policy inspect scansafe

• Question 225:

  Which policy is used to capture host information on the Cisco Next Generation Intrusion Prevention System?

  A. network discovery
  B. correlation
  C. intrusion
  D. access control
  C. intrusion

• Question 226:

  An engineer manages a Cisco Intrusion Prevention System via IME. A new user must be able to tune signatures, but must not be able to create new users. Which role for the new user is correct?

  A. viewer
  B. service
  C. operator
  D. administrator
  C. operator

  ---

  http://www.cisco.com/c/en/us/td/docs/security/ips/7- 0/command/reference/cmdref/crIntro.html

• Question 227:

  

  For which domains will the Cisco Email Security Appliance allow up to 5000 recipients per message?

  A. violet. public
  B. violet. public and blue. public
  C. violet. Public, blue. Public and green.public
  D. red. public orange. public red. public and orange. public
  B. violet. public and blue. public

• Question 228:

  How are HTTP requests handled by the Cisco WSA?

  A. transparent request has a destination IP address of the configured proxy.
  B. The URI for an implicit request doest not contain the DNS host.
  C. An explict request has a destination IP address of the intended web server.
  D. The URI for an explicit request contains the host with the protocol information.
  D. The URI for an explicit request contains the host with the protocol information.

• Question 229:

  What is the correct deployment for an IPS appliance in a network where traffic identified as threat traffic should be blocked and all traffic is blocked if the IPS fails?

  A. Inline; fail open
  B. Inline; fail closed
  C. Promiscuous; fail open
  D. Promiscuous; fail closed
  B. Inline; fail closed

• Question 230:

  Which commands are required to configure SSH on router? (Choose two.)

  A. Configure domain name using ip domain-name command
  B. Generate a key using crypto key generate rsa
  C. Configure a DHCP host for the router using dhcpname#configure terminal
  D. Generate enterprise CA self-sign certificate
  A. Configure domain name using ip domain-name command
  B. Generate a key using crypto key generate rsa

  ---

  Here are the steps:

  Configure a hostname for the router using these commands.

  yourname#configure terminal

  Enter configuration commands, one per line. End with CNTL/Z.

  yourname (config)#hostname LabRouter

  LabRouter(config)#

  Configure a domain name with the ip domain-name command followed by whatever you would like your domain name to be. I used CiscoLab.com.

  LabRouter(config)#ip domain-name CiscoLab.com

  We generate a certificate that will be used to encrypt the SSH packets using the crypto key generate rsa command.

  Take note of the message that is displayed right after we enter this command: "The name for the keys will be: LabRouter.CiscoLab.com" -- it combines the hostname of the router along with the domain name we configured to get the name of

  the encryption key generated; this is why it was important for us to, first of all, configure a hostname then a domain name before we generated the keys.

  Reference: https://www.pluralsight.com/blog/tutorials/configure-secure-shell-ssh-on-cisco- router