Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 311:

  Which type of policy do you configure if you want to look for a combination of events using Boolean logic?

  A. correlation
  B. application detector
  C. traffic profile
  D. access control
  E. intrusion
  A. correlation

• Question 312:

  

  

  

  

  

  

  

  

  

  

  

  

  What is the maximum message size that the Cisco Email Security Appliance will accept from the violet.public domain?

  A. 1 KB
  B. 100 KB
  C. 1 MB
  D. 10 MB
  E. 100 MB
  F. Unlimited
  D. 10 MB

  ---

  From the instructions we know that the reputation score for the violet.public domain has been set to 8. From the HAT table shown below we know that a score of 8 belongs to the UNKNOWNLIST group, which is assigned the ACCEPTED policy.

  

  Capture

  By clicking on the ACCEPTED policy we see that max message size has been set to the default value of 10M:

  

  Capture

• Question 313:

  Cisco's ASA CX includes which two URL categories? (Choose two.)

  A. Proxy Avoidance
  B. Dropbox
  C. Hate Speech
  D. Facebook
  E. Social Networking
  F. Instant Messaging and Video Messaging
  C. Hate Speech
  E. Social Networking

• Question 314:

  A customer's mobile clients now require content scanning, yet there is not an ASA on the network. Which deployment method is required for the Cisco AnyConnect Web Security Module?

  A. standalone component
  B. enterprise connection enforcement
  C. roaming umbrella component
  D. APEX enforcement
  C. roaming umbrella component

• Question 315:

  Select and Place:

  

  

• Question 316:

  Which command sets the number of packets to log on a Cisco IPS sensor?

  A. ip-log-count number
  B. ip-log-packets number
  C. ip-log-bytes number
  D. ip-log number
  B. ip-log-packets number

• Question 317:

  

  

  A. Check the answer below
  A. Check the answer below

  ---

  Answer: Steps are in below:

  First, enable the Gig 0/0 and Gig 0/1 interfaces:

  

  Second, create the pair under the "interface pairs" taB.

  

  Then, apply the HIGHRISK action rule to the newly created interface pair:

  

  Then apply the same for the MEDIUMRISK traffic (deny attacker inline)

  

  Finally. Log the packets for the LOWRICK event:

  

  When done it should look like this:

  

• Question 318:

  A system administrator wants to know if the email traffic from a remote partner will active special treatment message filters that are created just for them. Which tool on the Cisco Email Security gateway can you use to debug and emulate the flow that a message takes through the work queue?

  A. the trace tool
  B. centralized or local message tracking
  C. the CLI findevent command
  D. the CLI grep command
  E. the message tracker interface
  A. the trace tool

• Question 319:

  What is a valid search parameter for the Cisco ESA find event tool?

  A. Envelope Origination
  B. Envelope Type
  C. Message ID
  D. Download Type
  C. Message ID

• Question 320:

  When you create a new server profile on the Cisco ESA, which subcommand of the ldapconfig command configures spam quarantine end-user authentication?

  A. isqauth
  B. isqalias
  C. test
  D. server
  A. isqauth