Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 251:

  Which three routing options are valid with Cisco FirePOWER version 5.4? (Choose three.)

  A. Layer 3 routing with EIGRP
  B. Layer 3 routing with OSPF not-so-stubby area
  C. Layer 3 routing with RiPv2
  D. Layer 3 routing with RIPvl
  E. Layer 3 routing with OSPF stub area
  F. Layer 3 routing with static routes
  D. Layer 3 routing with RIPvl
  E. Layer 3 routing with OSPF stub area
  F. Layer 3 routing with static routes

  ---

  http://www.cisco.com/c/en/us/td/docs/security/firesight/541/user-guide/FireSIGHT-System-UserGuide-v5401/Intro-Preface.html

• Question 252:

  Refer to the following. Which description of the result of this configuration is true?

  Router(config)#line vty 5 15

  Router(config-line)#access-class 23 in

  A. Only clients denied in access list 23 can manage the router.
  B. Only telnet access (TCP) is allowed on the VTY lines of this router
  C. Only clients permitted in access list 23 can manage the router
  D. Only SSH access (TCP 23) is allowed on the VTY lines of this router.
  C. Only clients permitted in access list 23 can manage the router

• Question 253:

  During initial configuration, the Cisco ASA can be configured to drop all traffic if the ASA CX SSP fails by using which command in a policy-map?

  A. cxsc fail
  B. cxsc fail-close
  C. cxsc fail-open
  D. cxssp fail-close
  B. cxsc fail-close

• Question 254:

  Which description of an advantage of utilizing IPS virtual sensors is true?

  A. Different configurations can be applied to different sets of traffic.
  B. The persistent store is unlimited for the IPS virtual sensor.
  C. The virtual sensor does not require 802.1q headers for inbound traffic.
  D. Asymmetric traffic can be split between multiple virtual sensors
  A. Different configurations can be applied to different sets of traffic.

  ---

  http://www.cisco.com/c/en/us/td/docs/security/ips/7- 0/configuration/guide/cli/cliguide7/cli_virtual_sensors.pdf

• Question 255:

  If inline-TCP-evasion-protection-mode on a Cisco IPS is set to asymmetric mode, what is a side effect?

  A. Packet flow is normal.
  B. TCP requests are throttled.
  C. Embryonic connections are ignored.
  D. Evasion may become possible.
  D. Evasion may become possible.

• Question 256:

  A user is deploying a Cisco IPS appliance in a data center to mitigate most attacks, including atomic attacks. Which two modes does Cisco recommend using to configure for this? (Choose two.)

  A. VLAN pair
  B. interface pair
  C. transparent mode
  D. EtherChannel load balancing
  E. promiscuous mode
  A. VLAN pair
  D. EtherChannel load balancing

• Question 257:

  An engineer is using the policy trace tool to troubleshoot a WSA. Which behavior is used?

  A. External DLP policies are evaluated by tool
  B. Socks policies are evaluated by tool
  C. Web proxy
  C. Web proxy

• Question 258:

  An ASA with an IPS module must be configured to drop traffic matching IPS signatures and block all traffic if the module fails. Which describes the correct configuration?

  A. Inline Mode, Permit Traffic
  B. Inline Mode, Close Traffic
  C. Promiscuous Mode, Permit Traffic
  D. Promiscuous Mode, Close Traffic
  B. Inline Mode, Close Traffic

• Question 259:

  An engineer is trying to configuring email encryption on Cisco ESA. Which technology could be used as a key server?

  A. Cisco Registered Envelop Service
  B. Local CA
  C. Cisco Talos Services
  D. Cisco ISE
  A. Cisco Registered Envelop Service

• Question 260:

  The Web Cache Communication Protocol (WCCP) is a content-routing protocol that can facilitate the redirection of traffic flows in real time. Your organization has deployed WCCP to redirect web traffic that traverses their Cisco Adaptive Security Appliances (ASAs) to their Cisco Web Security Appliances (WSAs).

  The simulator will provide access to the graphical user interfaces of one Cisco ASA and one Cisco WSA that are participating in a WCCP service. Not all aspects of the GUIs are implemented in the simulator. The options that have been implemented are sufficient to determine the best answer to each of the questions that are presented.

  Your task is to examine the details available in the simulated graphical user interfaces and select the best answer.

  

  

  

  Which of the following is true with respect to the version of WCCP configured on the Cisco ASA and the Cisco WSA?

  A. Both are configured for WCCP v1.
  B. Both are configured for WCCP v2.
  C. Both are configured for WCCP v3.
  D. There is a WCCP version mismatch between the Cisco WSA and the Cisco ASA.
  B. Both are configured for WCCP v2.

  ---

  ASA version shows as version 2.0:

  

  WSA also shows version 2 is being used: