Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 361:

  Which command establishes a virtual console session to a CX module within a Cisco Adaptive Security Appliance?

  A. session 1 ip address
  B. session 2 ip address
  C. session 1
  D. session ips console
  E. session cxsc console
  E. session cxsc console

• Question 362:

  What are three benefits of the Cisco AnyConnect Secure Mobility Solution? (Choose three.)

  A. It can protect against command-injection and directory-traversal attacks.
  B. It provides Internet transport while maintaining corporate security policies.
  C. It provides secure remote access to managed computers.
  D. It provides clientless remote access to multiple network-based systems.
  E. It enforces security policies, regardless of the user location.
  F. It uses ACLs to determine best-route connections for clients in a secure environment.
  B. It provides Internet transport while maintaining corporate security policies.
  C. It provides secure remote access to managed computers.
  E. It enforces security policies, regardless of the user location.

• Question 363:

  Which statement about decrypting traffic on the Cisco Firepower Appliance is true?

  A. Using the Decrypt-Known Key option requires that you upload the public/private key pair from servers to the appliance
  B. The Decrypt-Resign option cannot be used with a local PKI.
  C. The Decrypt-Known Key option requires only that the public key be uploaded to the appliance
  D. The Decrypt-Resign option can be used with a well-known/public PKI.
  A. Using the Decrypt-Known Key option requires that you upload the public/private key pair from servers to the appliance

• Question 364:

  When attempting to tunnel FTP traffic through a stateful firewall that may be performing NAT or PAT, which type of VPN tunneling should be used to allow the VPN traffic through the stateful firewall?

  A. clientless SSL VPN
  B. IPsec over TCP
  C. Smart Tunnel
  D. SSL VPN plug-ins
  B. IPsec over TCP

• Question 365:

  A customer has various external http resources available including Intranet, Extranet, and Internet, with the proxy configuration is running in Explicit mode. Which method allows the client desktop browsers to be configured to select when to connect direct or when to use the proxy?

  A. PAC file
  A. PAC file

  ---

  https://en.wikipedia.org/wiki/Proxy_auto-config

• Question 366:

  In which way are packets handled when the IPS internal zone is set to "disabled"?

  A. All packets are dropped to the external zone.
  B. All packets are dropped to the internal zone.
  C. All packets are ignored in the internal zone.
  D. All packets are sent to the default external zone.
  D. All packets are sent to the default external zone.

• Question 367:

  What command alters the SSL ciphers used by the Cisco Email Security Appliance for TLS sessions and HTTPS access?

  A. sslconfig
  B. sslciphers
  C. tlsconifg
  D. certconfig
  A. sslconfig

• Question 368:

  Which three options are characteristics of router-based IPS? (Choose three.)

  A. It is used for large networks.
  B. It is used for small networks.
  C. It supports virtual sensors.
  D. It supports multiple VRFs.
  E. It uses configurable anomaly detection.
  F. Signature definition files have been deprecated.
  B. It is used for small networks.
  D. It supports multiple VRFs.
  F. Signature definition files have been deprecated.

• Question 369:

  What are the requirements for configuring a routed interface on a Firepower 3D8140 sensor? (Choose two.)

  A. IP address
  B. HA interface
  C. Virtual router
  D. 1Gbps interface
  E. 10 Gbps interface
  A. IP address
  C. Virtual router

• Question 370:

  What Software can be installed on the Cisco 4100 series appliance?

  A. FTD
  B. ASA
  C. ASAv
  D. FMC
  A. FTD

  ---

  FTD can be also installed on Firepower 2100, 4100 and 9300 hardware appliances. The Firepower chassis runs its own OS called FXOS while the FTD is installed on a module/blade.Link: https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-firewalls/212420-configure-firepower-threat-defense-ftd.html