Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 381:

  Which four statements are correct regarding management access to a Cisco Intrusion Prevention System? (Choose four.)

  A. The Telnet protocol is enabled by default
  B. The Telnet protocol is disabled by default
  C. HTTP is enabled by default
  D. HTTP is disabled by default
  E. SSH is enabled by default
  F. SSH is disabled by default
  G. HTTPS is enabled by default
  H. HTTPS is disabled by default
  B. The Telnet protocol is disabled by default
  D. HTTP is disabled by default
  E. SSH is enabled by default
  G. HTTPS is enabled by default

• Question 382:

  Which feature requires the network discovery policy for it to work on the Cisco Next Generate fusion Prevent-on System,

  A. impact flags
  B. URL filtering
  C. security intelligence
  D. health monitoring
  A. impact flags

• Question 383:

  If learning accept mode is set to "auto" and the knowledge base is loaded only when explicitly requested on the IPS, which statement about the knowledge base is true?

  A. The knowledge base is set to load dynamically.
  B. The knowledge base is set to "save only."
  C. The knowledge base is set to "discarded."
  D. The knowledge base is set to load statically.
  B. The knowledge base is set to "save only."

• Question 384:

  What two types of software you can install in Firepower 4000 and 7000?

  A. FMC
  B. Source fire
  A. FMC
  B. Source fire

• Question 385:

  Which Cisco ESA command is used to edit the ciphers that are used for GUI access?

  A. interfaceconfig
  B. etherconfig
  C. certconfig
  D. sslconfig
  D. sslconfig

• Question 386:

  An engineer is used the reporting feature on a WSA. Which option must they consider about the reporting capabilities?

  A. Reports can be viewed for a particular domain, user or category.
  B. Detail reports require a separate license.
  C. Reports to view system activity over a specific period of time do not exist.
  D. report must be scheduled manually.
  A. Reports can be viewed for a particular domain, user or category.

• Question 387:

  In which two places can thresholding settings be configured? (Choose two.)

  A. globally, per intrusion policy
  B. globally, within the network analysis policy
  C. on each access control rule
  D. on each IPS rule
  E. per preprocessor, within the network analysis policy
  C. on each access control rule
  D. on each IPS rule

• Question 388:

  Troubleshoot command for NGIPSv.

  A. system generate-troubleshoot all
  B. sudo sf_troubleshoot.pl
  A. system generate-troubleshoot all

• Question 389:

  A new Cisco IPS device has been placed on the network without prior analysis. Which CLI command shows the most fired signature?

  A. Show statistics virtual-sensor
  B. Show event alert
  C. Show alert
  D. Show version
  A. Show statistics virtual-sensor

• Question 390:

  Which option describes the role of the Learning Accept Mode for anomaly detection?

  A. It creates a knowledge base of the network traffic
  B. It detects ongoing attacks and adds them to a database.
  C. It configures the anomaly detection zones.
  D. It identifies incomplete connections and flags them.
  A. It creates a knowledge base of the network traffic

  ---

  http://www.cisco.com/c/en/us/td/docs/security/security_management/cisco_security_manag er/sec urity_manager/4-0/user/guide/CSMUserGuide_wrapper/ipsanom.html