Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 411:

  Which cisco CWS traffic- redirection option is most appropriate for roaming users?

  A. WSAv connector
  B. CWS connector
  C. Cisco ASA
  D. AnyConnect
  D. AnyConnect

• Question 412:

  Which Cisco technology is a modular security service that combines a stateful inspection firewall with next-generation application awareness, providing near real-time threat protection?

  A. Cisco ASA 5500 series appliances
  B. Cisco ASA CX Context-Aware Security
  C. WSA
  D. Internet Edge Firewall / IPS
  B. Cisco ASA CX Context-Aware Security

• Question 413:

  What information will be displayed when issuing the whoami command?

  A. Username only
  B. Username and Groups
  C. Username, Fullname and Groups
  D. Username, Groups, and Location
  D. Username, Groups, and Location

• Question 414:

  In Cisco FirePOWER 5.x and 6.0, which type of traffic causes a web page to be displayed by the appliance when Block or Interactive Block selected as an access control action?

  A. unencrypted HTTP
  B. FTP
  C. decrypted HTTP
  D. encrypted HTTP
  A. unencrypted HTTP

• Question 415:

  Which description of a correlation policy configuration in the Cisco Firepower Management Center is true?

  A. The system displays correlation policies that are created on all of the domains in a multidomain deployment
  B. Deleting a response group deletes the responses of that group
  C. You cannot add a host profile qualification to a correlation rule that is triggered by a malware event
  D. Correlation policy priorities override whitelist priorities
  C. You cannot add a host profile qualification to a correlation rule that is triggered by a malware event

  ---

  https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Correlation_Policies.html You cannot add a host profile qualification to a correlation rule that is triggered by a malware event : YES

  

  Deleting a response group deletes the responses of that group : NO

  

  The system displays correlation policies that are created on all of the domains in a multidomain deployment : NO

  

  Correlation policy priorities override whitelist priorities : NO

  

• Question 416:

  A network administrator noticed that all traffic that is redirected to the Cisco WSA from the Cisco ASA firewall is unable to get to Internet in a transparent proxy environment using WCCP. Which troubleshooting action can be taken on the CLI to make sure that WCCP communication is not failing?

  A. Ping the WCCP device
  B. Explicity point to the browser to the proxy
  C. Disable WCCP
  D. Check WCCP logs in debug mode to check there are no pending HIA or ISY request
  A. Ping the WCCP device

• Question 417:

  Which two practices are recommended for implementing NIPS at enterprise Internet edges? (Choose two.)

  A. Integrate sensors primarily on the more trusted side of the firewall (inside or DMZ interfaces).
  B. Integrate sensors primarily on the less trusted side of the firewall (outside interfaces).
  C. Implement redundant IPS and make data paths symmetrical.
  D. Implement redundant IPS and make data paths asymmetrical.
  E. Use NIPS only for small implementations.
  A. Integrate sensors primarily on the more trusted side of the firewall (inside or DMZ interfaces).
  C. Implement redundant IPS and make data paths symmetrical.

• Question 418:

  Elliptic curve cryptography is a stronger more efficient cryptography method meant to replace which current encryption technology?

  A. RSA
  B. DES
  C. AES
  D. 3DES
  A. RSA

• Question 419:

  Which signature engine is responsible for ICMP inspection on Cisco IPS?

  A. AIC Engine
  B. Fixed Engine
  C. Service Engine
  D. Atomic IP Engine
  D. Atomic IP Engine

• Question 420:

  Which command is used to enable strong ciphers on the Cisco Web Security Appliance?

  A. interfaceconfig
  B. strictssl
  C. etherconfig
  D. adminaccessconfig
  B. strictssl