Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 21:

  Which two options are features of the Cisco Email Security Appliance? (Choose two.)

  A. Cisco Anti-Replay Services
  B. Cisco Destination Routing
  C. Cisco Registered Envelope Service
  D. Cisco IronPort SenderBase Network
  C. Cisco Registered Envelope Service
  D. Cisco IronPort SenderBase Network

• Question 22:

  Which Cisco technology secures the network through malware filtering, category-based control, and reputation-based control?

  A. Cisco ASA 5500 Series appliances
  B. Cisco remote-access VPNs
  C. Cisco IronPort WSA
  D. Cisco IPS
  C. Cisco IronPort WSA

• Question 23:

  Drag and drop the steps on the left into the correct order on the right to configure a Cisco ASA NGFW with multiple security contexts.

  Select and Place:

  

  

• Question 24:

  Which two tasks must you perform when impalement CWS on a cisco ASA or ASAV?

  A. Create a new RSA key.
  B. Enable the ScanSafe feature
  C. Browse to whoami.scansade.not to verify that web redirection is operating normally
  D. Create an authenticating license key.
  E. Define the primary and secondary CWS proxy
  C. Browse to whoami.scansade.not to verify that web redirection is operating normally
  D. Create an authenticating license key.

• Question 25:

  Which settings are required when deploying Cisco IPS in high-availability mode using

  EtherChannel load balancy?

  A. ECLB IPS appliances must be in on-a-stick mode, ECLB IPS solution maintains state if a sensor goes down, and TCP flow is forced through the same IPS appliance.
  B. ECLB IPS appliances must not be in on-a-stick mode, ECLB IPS solution maintains state if a sensor goes down, and TCP flow is forced through the same IPS appliance flow
  C. ECLB IPS appliances must be in on-a-stick mode, ECLB IPS solution does not maintain state if a sensor goes down, and TCP flow is forced through a different IPS appliance.
  D. ECLB IPS appliances must not be in on-a-stick mode, ECLB IPS solution does not maintain state if a sensor goes down, and TCP flow is forced through a different IPS appliance.
  C. ECLB IPS appliances must be in on-a-stick mode, ECLB IPS solution does not maintain state if a sensor goes down, and TCP flow is forced through a different IPS appliance.

  ---

  http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_example 09186 a0080671a8d.shtml

• Question 26:

  With Cisco AMP for Endpoints, which option shows a list of all files that have been executed in your environment?

  A. vulnerable software
  B. file analysis
  C. detections
  D. prevalence
  E. threat root cause
  C. detections

• Question 27:

  An ASA with an IPS module must be configured to drop traffic matching IPS signatures and block all traffic if the module fails. Which describes the correct configuration?

  A. Inline Mode, Permit Traffic
  B. Inline Mode, Close Traffic
  C. Promiscuous Mode, Permit Traffic
  D. Promiscuous Mode, Close Traffic
  B. Inline Mode, Close Traffic

• Question 28:

  When learning accept mode is set to auto, and the action is set to rotate, when is the KB created and used?

  A. It is created every 24 hours and used for 24 hours.
  B. It is created every 24 hours, but the current KB is used.
  C. It is created every 1 hour and used for 24 hours.
  D. A KB is created only in manual mode.
  A. It is created every 24 hours and used for 24 hours.

• Question 29:

  Which Cisco WSA is intended for deployment in organizations of up to 1500 users?

  A. WSA S370
  B. WSA S670
  C. WSA S370-2RU
  D. WSA S170
  D. WSA S170

• Question 30:

  Which action cloud reduce the security of the management interface of the Cisco ESA appliance?

  A. Assign delegated administrator roles to engineers who manage the mail policies.
  B. create a network access list to allow all connections to the management interface
  C. Display a login banner indicating that all appliance use is logged and reviewed
  D. configure a web UI session timeout of 30 minutes for connected users.
  A. Assign delegated administrator roles to engineers who manage the mail policies.