Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 301:

  Which statement about the default configuration of an IPS sensor's management security settings is true?

  A. There is no login banner
  B. The web server port is TCP 80
  C. Telnet and SSH are enable
  D. User accounts lock after three attempts
  A. There is no login banner

• Question 302:

  Which statement about Cisco ASA multicast routing support is true?

  A. The Cisco ASA appliance supports PIM dense mode, sparse mode, and BIDIR-PIM.
  B. The Cisco ASA appliance supports only stub multicast routing by forwarding IGMP messages from multicast receivers to the upstream multicast router.
  C. The Cisco ASA appliance supports DVMRP and PIM.
  D. The Cisco ASA appliance supports either stub multicast routing or PIM, but both cannot be enabled at the same time.
  E. The Cisco ASA appliance supports only IGMP v1.
  D. The Cisco ASA appliance supports either stub multicast routing or PIM, but both cannot be enabled at the same time.

• Question 303:

  What are three best practices for a Cisco Intrusion Prevention System? (Choose three.)

  A. Checking for new signatures every 4 hours
  B. Checking for new signatures on a staggered schedule
  C. Automatically updating signature packs
  D. Manually updating signature packs
  E. Group tuning of signatures
  F. Single tuning of signatures
  B. Checking for new signatures on a staggered schedule
  C. Automatically updating signature packs
  E. Group tuning of signatures

• Question 304:

  Which two options are application layer preprocessors? (Choose two)

  A. HTTP Inspect preprocessor
  B. SIP preprocessor
  C. ICMP preprocessor
  D. Modbus preprocessor
  E. DNP3 preprocessor
  A. HTTP Inspect preprocessor
  B. SIP preprocessor

• Question 305:

  After configuring ASA with the Cisco Cloud Web Security connector, which command does a network engineer run to verify connectivity to the CWS proxy?

  A. show scansafe statistics
  B. show content-scan statistics
  C. show scansafe server
  D. show scansafe statistics
  A. show scansafe statistics

• Question 306:

  Which three categories of the seven major risk management categories are covered in the Cyber Risk Reports? (Choose three.)

  A. vulnerability
  B. risk rating
  C. legal
  D. confidence level
  E. geopolitical
  F. global reputation
  A. vulnerability
  C. legal
  E. geopolitical

• Question 307:

  On Cisco Firepower Management Center, which policy is used to collect health modules alerts from managed devices?

  A. health policy
  B. system policy
  C. correlation policy
  D. access control policy
  E. health awareness policy
  A. health policy

• Question 308:

  Which command disables SSH access for administrators on the Cisco ESA?

  A. interfaceconfig
  B. sshconfig
  C. sslconfig
  D. systemsetup
  A. interfaceconfig

• Question 309:

  When you view a FireAMP Analysis Overview to mitigate a malware issue, where do you look for information about sites from which the malware attempted to download additional files?

  A. Involved IP Addresses section
  B. Startup section
  C. Dropped Files section
  D. Threat Root Cause section
  A. Involved IP Addresses section

• Question 310:

  An engineering team has implemented Transparent User Identification on their Cisco Web Security Appliance. How is the User success authenticated?

  A. trusted source
  B. public key
  C. certificate
  D. host name
  A. trusted source