Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 291:

  Which three access control actions permit traffic to pass through the device when using Cisco FirePOWER? (Choose three.)

  A. pass
  B. trust
  C. monitor
  D. allow
  E. permit
  F. inspect
  B. trust
  C. monitor
  D. allow

  ---

  http://www.cisco.com/c/en/us/td/docs/security/firesight/541/user-guide/FireSIGHT-System-UserGuide-v5401/AC-Rules-Tuning-Overview.html

• Question 292:

  Using the default modular policy framework global configuration on the Cisco ASA, how does the Cisco ASA process outbound HTTP traffic?

  A. HTTP flows are not permitted through the Cisco ASA, because HTTP is not inspected by default.
  B. HTTP flows match the inspection_default traffic class and are inspected using HTTP inspection.
  C. HTTP outbound traffic is permitted, but all return HTTP traffic is denied.
  D. HTTP flows are statefully inspected using TCP stateful inspection.
  D. HTTP flows are statefully inspected using TCP stateful inspection.

• Question 293:

  Which two types of software can be installed on a cisco ASA-5545-X appliance? (choose two)

  A. cisco ASAv
  B. Cisco firePOWER Appliance
  C. Cisco firePOWER services
  D. cisco ASA
  E. ciscofirePOWER management Center
  C. Cisco firePOWER services
  D. cisco ASA

• Question 294:

  Refer to the exhibit.

  ASA#show service-policy sfr

  Global policy: service-policy global_policy class-xxxxxx: SFr SFR card status Up mode fail=open monitor-only packet input 0. packet output 44715478697. drop 0. reset-drop 0

  Which tool do you use to verify whether a primary server established a connections to Cisco CWS on a Cisco ASA?

  A. Tcp ping
  B. Traceroute
  C. Telnet
  D. ping
  A. Tcp ping

• Question 295:

  

  

  Which three statements about the Cisco IPS appliance configurations are true? (Choose three.)

  A. The maximum number of denied attackers is set to 10000.
  B. The block action duraton is set to 3600 seconds.
  C. The Meta Event Generator is globally enabled.
  D. Events Summarization is globally disabled.
  E. Threat Rating Adjustment is globally disabled.
  A. The maximum number of denied attackers is set to 10000.
  B. The block action duraton is set to 3600 seconds.
  C. The Meta Event Generator is globally enabled.

• Question 296:

  Which command applies WCCP redirection on the inside interface of a Cisco ASA 5500-x firewall?

  A. wccp interface inside 90 redirect in
  B. web-cache interface inside 90 redirect in
  C. wccp interface inside redirect out
  D. wccp web-cache
  A. wccp interface inside 90 redirect in

• Question 297:

  What access control action will analyze the traffic as it passes through the device?

  A. trust
  B. Allow
  C. Monitor
  D. inspect
  C. Monitor

• Question 298:

  Which two health modules are available within the Firepower solution?

  A. AMP for Firepower Status
  B. Policy Usage
  C. Appliance heartbeat
  D. SNMP Analysis
  E. Connection Monitoring
  A. AMP for Firepower Status
  C. Appliance heartbeat

• Question 299:

  

  Refer to the exhibit. Which option is a result of this configuration?

  A. All ingress traffic on the inside interface that matches the access list is redirected.
  B. All egress traffic on the outside interface that matches the access list is redirected.
  C. All TCP traffic that arrives on the inside interface is redirected.
  D. All ingress and egress traffic is redirected to the Cisco FirePOWER module.
  D. All ingress and egress traffic is redirected to the Cisco FirePOWER module.

• Question 300:

  An engineer wants to improve web traffic performance by proxy caching. Which technology provides this improvement?

  A. Firepower
  B. FireSIGT
  C. WSA
  D. ASA
  C. WSA