Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 401:

  Which two authentication options can be leveraged for directory integration with the Cisco Cloud Security ISR-G2 connector? (Choose Two)

  A. Kerberos
  B. NTLM
  C. LDAP
  D. OpenID
  E. SAML
  B. NTLM
  C. LDAP

• Question 402:

  Which three functions can Cisco Application Visibility and Control perform? (Choose three.)

  A. Validation of malicious traffic
  B. Traffic control
  C. Extending Web Security to all computing devices
  D. Application-level classification
  E. Monitoring
  F. Signature tuning
  B. Traffic control
  D. Application-level classification
  E. Monitoring

• Question 403:

  What are two benefits of using SPAN with promiscuous mode deployment? (Choose two.)

  A. SPAN does not introduce latency to network traffic.
  B. SPAN can perform granular scanning on captures of per-IP-address or per-port monitoring.
  C. Promiscuous Mode can silently block traffic flows on the IDS.
  D. SPAN can analyze network traffic from multiple points.
  A. SPAN does not introduce latency to network traffic.
  D. SPAN can analyze network traffic from multiple points.

• Question 404:

  Which option is omitted from a query on a ESA virtual appliance?

  A. raidrable
  B. FailoverHealthy
  C. keyExpiration
  D. CPUUtilizationExceeded
  A. raidrable

• Question 405:

  Which two services must remain as on-premisses equipment when deploying a hybrid email solution? (choose two)

  A. DDoS
  B. DLP
  C. antispam
  D. encryption
  E. antivirus
  B. DLP
  D. encryption

• Question 406:

  Which command verifies that the correct CWS license key information was entered on the Cisco ASA?

  A. sh run scansafe server
  B. sh run scansafe
  C. sh run server
  D. sh run server scansafe
  B. sh run scansafe

• Question 407:

  Over the period of one day, several Atomic ARP engine alerts fired on the same IP address. You observe that each time an alert fired, requests on the IP address exceeded replies by the same number. Which configuration could cause this behavior?

  A. The reply-ratio parameter is enabled.
  B. MAC flip is enabled.
  C. The inspection condition is disabled.
  D. The IPS is misconfigured.
  A. The reply-ratio parameter is enabled.

• Question 408:

  Which IPS signature regular expression CLI command matches a host issuing a domain lookup for www.theblock.com?

  A. regex-string (\x03[Tt][Hh][Ee]\x05[Bb][Ll][Oo][Cc][Kk])
  B. regex-string (\x0b[theblock.com])
  C. regex-string (\x03[the]\x05[block]0x3[com])
  D. regex-string (\x03[T][H][E]\x05[B][L][O][C][K]\x03[.][C][O][M]
  A. regex-string (\x03[Tt][Hh][Ee]\x05[Bb][Ll][Oo][Cc][Kk])

• Question 409:

  Joe was asked to secure access to the Cisco Web Security Appliance to prevent unauthorized access. Which four steps should Joe implement to accomplish this goal? (Choose four.)

  A. Implement IP access lists to limit access to the management IP address in the Cisco Web Security Appliance GUI.
  B. Add the Cisco Web Security Appliance IP address to the local access list.
  C. Enable HTTPS access via the GUI/CLI with redirection from HTTP.
  D. Replace the Cisco self-signed certificate with a publicly signed certificate.
  E. Put the Cisco WSA Management interface on a private management VLAN.
  F. Change the netmask on the Cisco WSA Management interface to a 32-bit mask.
  G. Create an MX record for the Cisco Web Security Appliance in DNS.
  A. Implement IP access lists to limit access to the management IP address in the Cisco Web Security Appliance GUI.
  C. Enable HTTPS access via the GUI/CLI with redirection from HTTP.
  D. Replace the Cisco self-signed certificate with a publicly signed certificate.
  E. Put the Cisco WSA Management interface on a private management VLAN.

• Question 410:

  Which Cisco Advanced Malware protection for Endpoints deployment architecture is designed to keep data within a network perimeter?

  A. cloud web services
  B. network AMP
  C. private cloud
  D. public cloud
  C. private cloud