Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 31:

  Which SSL traffic decryption feature is used when decrypting traffic from an external host to a server on your network?

  A. Decrypt by stripping the server certificate.
  B. Decrypt by resigning the server certificate
  C. Decrypt with a known private key
  D. Decypt with a known public key
  B. Decrypt by resigning the server certificate

• Question 32:

  An engineer is troubleshooting ARP cache on the ESA. Which command accomplishes this task?

  A. diagnostic -> network -> arpshow
  B. show ip arpshow
  C. diagnostic -> ip -> arpshow
  D. show network arpshow
  A. diagnostic -> network -> arpshow

• Question 33:

  What FirePOWER protocol provides gateway redundancy for IPv4 and IPv6 addresses on routed or hybrid interfaces?

  A. ECLB
  B. SFRP
  C. OSPF
  D. WCCP
  B. SFRP

  ---

  SFRPYou can configure Cisco Redundancy Protocol (SFRP) to achieve network redundancy for high availability on either a 7000 or 8000 Series device high-availability pair or individual devices. SFRP provides gateway redundancy for both IPv4 and IPv6 addresses. You can configure SFRP on routed and hybrid interfaces.If the interfaces are configured on individual devices, they must be in the same broadcast domain. You must designate at least one of the interfaces as master and an equal number as backup. The system supports only one master and one backup per IP address. If network connectivity is lost, the system automatically promotes the backup to master to maintain connectivity.The options you set for SFRP must be the same on all interfaces in a group of SFRP interfaces. Multiple IP addresses in a group must be in the same master/ backup state. Therefore, when you add or edit an IP address, the state you set for that address propagates to all the addresses in the group. For security purposes, you must enter values for Group ID and Shared Secret that are shared among the interfaces in the group.To enable SFRP IP addresses on a virtual router, you must also configure at least one non-SFRP IP address.For 7000 or 8000 Series devices in a high-availability pair, you designate the shared secret and the system copies it to the high-availability pair peer along with the SFRP IP configuration. The shared secret authenticates peer data.Link: https://www.cisco.com/c/en/us/td/docs/security/firepower/601/configuration/guide/fpmc-config-guide-v601/Setting_Up_Virtual_Routers.html

• Question 34:

  Which type of signature is generated by copying a default signature and modifying its behavior?

  A. meta
  B. custom
  C. atomic
  D. normalized
  B. custom

• Question 35:

  The helpdesk was asked to provide a record of delivery for an important email message that a customer claims it did not receive. Which feature of the Cisco Email Security Appliance provides this record?

  A. Outgoing Mail Reports
  B. SMTP Routes
  C. Message Tracking
  D. Scheduled Reports
  E. System Administration
  C. Message Tracking

• Question 36:

  A client has Cisco Cloud Web Security installed and is having issues with social media sites such as Facebook, Instagram, and Linkedin. Which two types of filters must be applied to solve this issue? (Choose two.)

  A. application
  B. domain
  A. application
  B. domain

• Question 37:

  Which command verifies that CWS redirection is working on a Cisco IOS router?

  A. show content-scan session active
  B. show content-scan summary
  C. show interfaces stats
  D. show sessions
  A. show content-scan session active

• Question 38:

  What are 2 types or forms of suppression on a FirePower policy (or FTD)?

  A. source
  B. port
  C. rule
  D. protocol
  E. application
  A. source
  C. rule

  ---

  vent SuppressionSpecified events notifications can be suppressed on the basis of source/ destination IP address or per Rule.Note: When you add event suppression for a rule. The signature inspection works as normally but the system does not generate the events if traffic matches the signature. If you specify a specific Source/Destination then events do not appear only for the specific source/destination for this rule. If you choose to suppress the complete rule then the system does not generate any event for this rule.Steps to configure Event Threshold:Step 1. Select the Rule(s) for which you want to configure Event Threshold.Step 2. Click Event Filtering.Step 3. Click Suppression.Step 4.Select Suppression Type from the drop down list. (Rule or Source or Destination).Step 5. Click OK to complete.

  https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-firepower-services/200451-Configure-Intrusion-Policy-and-Signature.html

• Question 39:

  In order to set up HTTPS decryption on the Cisco Web Security Appliance, which two steps must be performed? (Choose two.)

  A. Enable and accept the EULA under Security Services > HTTPS Proxy.
  B. Upload a publicly signed server certificate.
  C. Configure or upload a certificate authority certificate.
  D. Enable HTTPS decryption in Web Security Manager > Access Policies.
  A. Enable and accept the EULA under Security Services > HTTPS Proxy.
  C. Configure or upload a certificate authority certificate.

• Question 40:

  A university policy has to allow open access to resources on the Internet for research, but internal workstations have been exposed to malware. Which AMP feature allows the engineering team to determine whether a file is installed on a selected few workstations?

  A. file manager
  B. file conviction
  C. file determination
  D. file prevalence
  E. file discovery
  D. file prevalence