Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 371:

  What are two analysis method of file inspection on Network-based Cisco Advanced Malware Protection? (Choose two.)

  A. Spero analysis
  B. network analysis
  C. user analysis
  D. dynamic analysis
  E. intrusion analysis
  A. Spero analysis
  D. dynamic analysis

• Question 372:

  Which CLI command is used to register a Cisco FirePOWER sensor to Firepower Management Center?

  A. configure system add
  B. configure manager add host
  C. configure manager delete
  D. configure manger add
  A. configure system add

  ---

  http://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide /fpmc-config-guide-v60/fpmc-config-guide-v60_appendix_01011110.html#ID-2201-00000005

• Question 373:

  Which two statements about Cisco DLP are true? (Choose two.)

  A. The network deployment protects data in the data center and on individual workstation
  B. It encrypts email message automatically default
  C. It can protect confidential data a rest and in transit
  D. The DLP license is includes with the standard Cisco ironPort ESA license.
  E. It include predefined policy template to support compliance with HIPPA PCHDSS and other regulation.
  F. It is most effective deployed on individual endpoints to protect against data leaving the network
  D. The DLP license is includes with the standard Cisco ironPort ESA license.
  E. It include predefined policy template to support compliance with HIPPA PCHDSS and other regulation.

• Question 374:

  

  

  To what extent will the Cisco IPS sensor contribute data to the Cisco SensorBase network?

  A. It will not contribute to the SensorBase network.
  B. It will contribute to the SensorBase network, but will withhold some sensitive information
  C. It will contribute the victim IP address and port to the SensorBase network.
  D. It will not contribute to Risk Rating adjustments that use information from the SensorBase network.
  B. It will contribute to the SensorBase network, but will withhold some sensitive information

  ---

  To configure network participation, follow these steps:

  Step 1: Log in to IDM using an account with administrator privileges. Step 2: Choose Configuration > Policies > Global Correlation > Network Participation. Step 3: To turn on network participation, click the Partial or Full radio button:

  稰artial--Data is contributed to the SensorBase Network, but data considered potentially sensitive is filtered out and never sent.

  稦ull--All data is contributed to the SensorBase Network

  In this case, we can see that this has been turned off as shown below:

  

• Question 375:

  User wants to deploy your managed device in Layer 3 routed mode and must configure a virtual router and a routed interface. Which managed shows this configuration?

  A. Cisco FirePOWER services on a Cisco ASA 5500x.
  B. virtual NGIPS
  C. Cisco FirePOWER module on a Cisco ASA 5585x.
  D. Cisco FirePOWER appliance.
  C. Cisco FirePOWER module on a Cisco ASA 5585x.

• Question 376:

  In the Cisco Email Security Appliance, which tool can be used to send a test email so a user can follow the flow of messages with the configuration?

  A. policy trace
  B. Recipient access table
  C. Content filter
  D. Message filter
  A. policy trace

• Question 377:

  A network administrator noticed that all traffic that is redirected to the Cisco WSA from the Cisco ASA firewall cannot get to the internet in a Transparent proxy environment using WCCP. Which troubleshooting actions can be taken on the CLI to make sure WCCP communication is not falling

  A. Ping the WCCP device.
  B. Disable WCCP to see if the WCCP service is causing the issue.
  C. Check WCCP logs in debugs mode to check there are n pending HIA or ISY requests.
  D. Explicitly point the browser to the proxy.
  B. Disable WCCP to see if the WCCP service is causing the issue.

• Question 378:

  Refer to the exhibit.

  ASA#show service-policy sfr

  Global policy: service-policy global_policy class-xxxxxx: SFr SFR card status Up mode fail=open monitor-only packet input 0. packet output 44715478697. drop 0. reset-drop 0

  Which two descriptions of the configuration of the Cisco FirePOWER Service module are true? (Choose two.)

  A. Traffic continues to flow if the module fails
  B. Traffic is blocked if the module fails
  C. The module is operating in IDS mode
  D. The module is operating on IPS mode.
  E. The module fails to receive redirected traffic.
  A. Traffic continues to flow if the module fails
  C. The module is operating in IDS mode

• Question 379:

  

  What is the maximum message size that the Cisco Email Security Appliance will accept from the violet.public domain?

  A. 1 KB
  B. 100 KB
  C. 1 MB
  D. 10 MB
  E. 100 MB
  F. Unlimited
  D. 10 MB

• Question 380:

  Which two fields can be used to create a new email alert within the Cisco firepower Management Center under the Policies > Actions > Alerts tab? (Choose two)

  A. From
  B. Relay Host
  A. From
  B. Relay Host

  ---

  Correct:Available fields are; Name, To, From and Relay Host