Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 271:

  Which Cisco Web Security Appliance design requires minimal change to endpoint devices?

  A. Transparent Mode
  B. Explicit Forward Mode
  C. Promiscuous Mode
  D. Inline Mode
  A. Transparent Mode

• Question 272:

  Which two options are known limitations in deploying an IPS sensor in promiscuous mode versus inline mode? (Choose two).

  A. It is less effective in stopping email viruses and automated attackers such as worms.
  B. It requires less of an operational response because the attacks are blocked automatically without operational team support.
  C. Sensors in this deployment cannot stop the trigger packet and are not guaranteed to stop a connection.
  D. A sensor failure affects network functionality.
  E. It does not see the same traffic.
  A. It is less effective in stopping email viruses and automated attackers such as worms.
  C. Sensors in this deployment cannot stop the trigger packet and are not guaranteed to stop a connection.

• Question 273:

  Which IPS feature allows you to aggregate multiple IPS links over a single port channel?

  A. UDLD
  B. ECLB
  C. LACP
  D. PAgP
  B. ECLB

• Question 274:

  When https traffic is scanned, which component of the full URL does CWS log?

  A. not log
  B. only host
  C. host and query
  D. path and query
  B. only host

• Question 275:

  For which domain will the Cisco Email Security Appliance allow to 500 recepient per messages?

  A. Orange public
  B. Violet public and blue public
  C. Violet public blue and green public
  D. Red public and orange public
  E. Red public
  F. Violet public
  A. Orange public

• Question 276:

  

  Which signature definition is virtual sensor 0 assigned to use?

  A. rules0
  B. vs0
  C. sig0
  D. ad0
  E. ad1
  F. sigl
  C. sig0

  ---

  This is the default signature.

  You can create multiple security policies and apply them to individual virtual sensors. A security policy is made up of a signature definition policy, an event action rules policy, and an anomaly detection policy. Cisco IPS contains a default

  signature definition policy called sig0, a default event action rules policy called rules0, and a default anomaly detection policy called ad0. You can assign the default policies to a virtual sensor or you can create new policies.

• Question 277:

  A user wants to configure high availability with their Cisco Firepower deployment.

  Which platforms allow for clustering?

  A. All platforms support clustering
  B. Virtual NGIPS
  C. FirePower Threat Defense for ISR
  D. Cisco FirePower appliance
  D. Cisco FirePower appliance

• Question 278:

  Under which circumstance does the Cisco AMP assign a file disposition without submitting the file to the cloud for dynamic analysis?

  A. when the file has previously been submitted for dynamic analysis and the analysis failed
  B. when an executable file matches a file rule with the Malware Cloud Lookup action and the lookup provides a file disposition
  C. when the file is a PDF or Microsoft Office document
  D. when a previously undetected file matches a file rule with the Block Malware action
  D. when a previously undetected file matches a file rule with the Block Malware action

  ---

  https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-configguide-v60/fpmc-config-guide-v60_chapter_01110001.html#ID-2199-000005d8

  

• Question 279:

  Which two types of software can be installed on a FP-9300 appliance? (Choose two.)

  A. Cisco Firepower Appliance
  B. Cisco ASA
  C. Cisco Firepower Management Center
  D. Cisco Firepower Service
  E. Cisco Firepower Threat Defense
  C. Cisco Firepower Management Center
  E. Cisco Firepower Threat Defense

• Question 280:

  An engineer must evaluate the security gaps with their current WSA. What additional protection does AMP offer for WSA?

  A. point in time detection
  B. roaming user protection
  C. data loss prevention
  D. restricted bandwidth
  A. point in time detection