Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 391:

  Which Cisco Cloud Web Security tool provides URL categorization?

  A. Cisco Dynamic Content Analysis Engine
  B. Cisco ScanSafe
  C. ASA Firewall Proxy
  D. Cisco Web Usage Control
  D. Cisco Web Usage Control

• Question 392:

  Which Cisco IOS command uses the default class map to limit SNMP inspection to traffic from

  10.1.1.0 to 192.168.1.0?

  A. hostname(config)# access-list inspect extended permit ip 10.1.1.0.0.0.0.255 192.168.1.0.0.0.0.255 hostname(config)# class-map inspection_default hostname(config-cmap)# match access-list inspect
  B. hostname(config)# access-list inspect extended permit ip 10.1.1.0 255.255.255.0 192.168.1.0 255.255.255.0 hostname(config-cmap)# match access-list inspect
  C. hostname(config)# access-list inspect extended permit ip 10.1.1.0 255.255.255.0 192.168.1.0 255.255.255.0 hostname(config)# class-map inspection_default hostname(config-cmap)# match access-list inspect
  D. hostname(config)# access-list inspect extended permit ip 10.1.1.0.0.0.255 192.168.1.0.0.0.255 hostname(config)# class-map inspection_default
  C. hostname(config)# access-list inspect extended permit ip 10.1.1.0 255.255.255.0 192.168.1.0 255.255.255.0 hostname(config)# class-map inspection_default hostname(config-cmap)# match access-list inspect

  ---

  Reference:

  http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/inspect _overvi ew.html

• Question 393:

  Which three statements concerning keystroke logger detection are correct? (Choose three.)

  A. requires administrative privileges in order to run
  B. runs on Windows and MAC OS X systems
  C. detects loggers that run as a process or kernel module
  D. detects both hardware- and software-based keystroke loggers
  E. allows the administrator to define "safe" keystroke logger applications
  A. requires administrative privileges in order to run
  C. detects loggers that run as a process or kernel module
  E. allows the administrator to define "safe" keystroke logger applications

• Question 394:

  Which three statements about Cisco ASA CX are true? (Choose three.)

  A. It groups multiple ASAs as a single logical device.
  B. It can perform context-aware inspection.
  C. It provides high-density security services with high availability.
  D. It uses policy-based interface controls to inspect and forward TCP- and UDP-based packets.
  E. It can make context-aware decisions.
  F. It uses four cooperative architectural constructs to build the firewall.
  B. It can perform context-aware inspection.
  E. It can make context-aware decisions.
  F. It uses four cooperative architectural constructs to build the firewall.

• Question 395:

  What is the default antispam policy for positively identified messages within the Cisco Email Security Appliance?

  A. Drop
  B. Deliver and Append with [SPAM]
  C. Deliver and Prepend with [SPAM]
  D. Deliver and Alternate Mailbox
  C. Deliver and Prepend with [SPAM]

• Question 396:

  A customer is concerned with their employee's internet usage and has asked for more web traffic control. Which two features of the cisco web security appliance help with issue? (choose two)

  A. Advanced Malware Protection
  B. Dynamic ARP Inspection
  C. DHCP spoofing Protection
  D. Network Address Translation
  E. Application Visibility and Control
  A. Advanced Malware Protection
  E. Application Visibility and Control

• Question 397:

  Which Cisco AMP file disposition valid?

  A. pristine
  B. malware
  C. dirty
  D. nonmalicios
  B. malware

  ---

  https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Reference_a_wrapper_Chapter_topic_here.html

• Question 398:

  Which two options are characteristics of router-based IPS? (Choose two.)

  A. It supports custom signatures
  B. It supports virtual sensors.
  C. It supports multiple VRFs.
  D. It uses configurable anomaly detection.
  E. Signature definition files have been deprecated.
  C. It supports multiple VRFs.
  E. Signature definition files have been deprecated.

• Question 399:

  Which type of interface do you configure to receive traffic from a switch or tap, promiscuously, on a cisco firePOWER device?

  A. inline set
  B. transparent
  C. Routed
  D. Passive
  D. Passive

• Question 400:

  Which interface type allows packets to be dropped?

  A. passive
  B. inline
  C. TAP
  D. either passive or inline, provided that the intrusion policy has the Drop When Inline check box selected.
  D. either passive or inline, provided that the intrusion policy has the Drop When Inline check box selected.