Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 281:

  A Cisco AnyConnect user profile can be pushed to the PC of a remote user from a Cisco ASA. Which three user profile parameters are configurable? (Choose three.)

  A. Backup Server list
  B. DTLS Override
  C. Auto Reconnect
  D. Simultaneous Tunnels
  E. Connection Profile Lock
  F. Auto Update
  A. Backup Server list
  C. Auto Reconnect
  F. Auto Update

• Question 282:

  Which four advanced endpoint assessment statements are correct? (Choose four.)

  A. examines the remote computer for personnel firewalls applications
  B. examines the remote computer for antivirus applications
  C. examines the remote computer for antispyware applications
  D. examines the remote computer for malware applications
  E. does not perform any remediation but provides input that can be evaluated by DAP records
  F. performs active remediation by applying rules, activating modules, and providing updates where applicable
  A. examines the remote computer for personnel firewalls applications
  B. examines the remote computer for antivirus applications
  C. examines the remote computer for antispyware applications
  F. performs active remediation by applying rules, activating modules, and providing updates where applicable

• Question 283:

  When you configure the Cisco ESA to perform blacklisting, what are two items you can disable to enhance performance? (Choose two.)

  A. rootkit detection
  B. spam scanning
  C. APT detection
  D. antivirus scanning
  E. URL filtering
  B. spam scanning
  D. antivirus scanning

• Question 284:

  Which three statements about Cisco CWS are true? (Choose three.)

  A. It provides protection against zero-day threats.
  B. Cisco SIO provides it with threat updates in near real time.
  C. It supports granular application policies.
  D. Its Roaming User Protection feature protects the VPN from malware and data breaches.
  E. It supports local content caching.
  F. Its Cognitive Threat Analytics feature uses cloud-based analysis and detection to block threats outside the network.
  A. It provides protection against zero-day threats.
  B. Cisco SIO provides it with threat updates in near real time.
  C. It supports granular application policies.

• Question 285:

  Which two variable types can be defined within Snort rules? (Choose two.)

  A. srcvar
  B. portvar
  C. dstvar
  D. ipvar
  E. netvar
  B. portvar
  D. ipvar

• Question 286:

  Which option describes a customer benefit of the Cisco Security IntelliShield Alert Manager?

  A. It provides access to threat and vulnerability information for Cisco related products only.
  B. It consolidates vulnerability information from an internal Cisco source, which allows security personnel to focus on remediation and proactive protection versus research.
  C. It provides effective and timely security intelligence via early warnings about new threats and technology vulnerabilities.
  D. It enhances the efficiency of security staff with accurate, noncustomizable threat intelligence, critical remediation information, and easy-to-use workflow tools.
  C. It provides effective and timely security intelligence via early warnings about new threats and technology vulnerabilities.

• Question 287:

  Which set of commands changes the FTP client timeout when the sensor is communicating with an FTP server?

  A. sensor# configure terminal sensor(config)# service sensor sensor(config-hos)# network-settings sensor(config-hos-net)# ftp-timeout 500
  B. sensor# configure terminal sensor(config)# service host sensor(config-hos)# network-settings parameter ftp sensor(config-hos- net)# ftp-timeout 500
  C. sensor# configure terminal sensor(config)# service host sensor(config-hos)# network-settings sensor(config-hos-net)# ftp-timeout 500
  D. sensor# configure terminal sensor(config)# service network sensor(config-hos)# network-settings sensor(config-hos-net)# ftp-timeout 500
  C. sensor# configure terminal sensor(config)# service host sensor(config-hos)# network-settings sensor(config-hos-net)# ftp-timeout 500

• Question 288:

  Which Cisco FirePOWER setting is used to reduce the number of events received in a period of time and avoid being overwhelmed?

  A. thresholding
  B. rate-limiting
  C. limiting D. correlation
  D

• Question 289:

  Exhibit:

  

  Which configuration blow would result in this output of the show service-policy sfr command?

  A. policy-map global_policy class inspection_default class sfr sfr fail-open
  B. policy-map global_policy class inspection_default class sfr sfr fail-close
  C. policy-map global_policy class inspection_default class sfr sfr fail-open monitor-only
  D. policy-map global_policy class inspection_default class sfr sfr fail-close monitor-only
  C. policy-map global_policy class inspection_default class sfr sfr fail-open monitor-only

• Question 290:

  

  What is the maximum message size that the Cisco Email Security Appliance will accept from the violet.public domain?

  A. 1 KB
  B. 100 KB
  C. 1 MB D. 10 MB
  E. 100 MB
  F. Unlimited
  D