Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 421:

  Which Cisco WSA is intended for deployment in organizations of more than 6000 users?

  A. WSA S370
  B. WSA S670
  C. WSA S370-2RU
  D. WSA S170
  B. WSA S670

• Question 422:

  After configuring an ISR with the Cisco Cloud Web security connector, which command does a network engineer run to verify connectivity to the CVV proxy?

  A. show content-scan summary
  B. show content-scan statistics
  C. show scansafe server
  D. show scansafe statistics
  A. show content-scan summary

• Question 423:

  Which Cisco Firepower rule action displays a HTTP warning page and resets the connection of HTTP traffic specified in the access control rule ?

  A. Interactive Block with Reset
  B. Block
  C. Allow with Warning
  D. Interactive Block
  A. Interactive Block with Reset

  ---

  http://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa-firepo wer-module-user-guide-v541/AC-Rules-Tuning-Overview.html

• Question 424:

  Which description of an email solution that uses hybrid mode is true?

  A. uses an on-premises Cisco ESA that scans inbound email by using the DLP service
  B. uses an on-premises Cisco ESA that scans inbound email by using encryption policies
  C. cleans inbound email by using a cloud-based Cisco ESA
  D. cleans outbound email by using a cloud-based Cisco ESA
  C. cleans inbound email by using a cloud-based Cisco ESA

  ---

  https://www.cisco.com/c/dam/en/us/td/docs/security/ces/overview_guide/Cisco_Cloud_Hybrid_Email_Security_Overview_Guide.pdf

• Question 425:

  Which option describes device trajectory on Cisco Advanced Malware Protection for Endpoints?

  A. It shows the file path on a host.
  B. It shows a full packet capture of the file.
  C. It shows which devices on the network received the file.
  D. It shows what a file did on a host.
  D. It shows what a file did on a host.

• Question 426:

  Which two Snort actions are available by default creating Snort rules, regardless of deployment mode? (Choose two)

  A. activate
  B. sdrop
  C. drop
  D. pass
  E. reject
  A. activate
  D. pass

  ---

  http://www.forum-intrusion.com/snort/SnortUsersManual.pdf

• Question 427:

  The Web Cache Communication Protocol (WCCP) is a content-routing protocol that can facilitate the redirection of traffic flows in real time. Your organization has deployed WCCP to redirect web traffic that traverses their Cisco Adaptive

  Security Appliances (ASAs) to their Cisco Web Security Appliances (WSAs).

  The simulator will provide access to the graphical user interfaces of one Cisco ASA and one Cisco WSA that are participating in a WCCP service. Not all aspects of the GUIs are implemented in the simulator. The options that have been

  implemented are sufficient to determine the best answer to each of the questions that are presented.

  Your task is to examine the details available in the simulated graphical user interfaces and select the best answer.

  

  

  How many Cisco ASAs and how many Cisco WSAs are participating in the WCCP service?

  A. One Cisco ASA or two Cisco ASAs configured as an Active/Standby failover pair, and one Cisco WSA.
  B. One Cisco ASA or two Cisco ASAs configured as an Active/Active failover pair, and one Cisco WSA.
  C. One Cisco ASA or two Cisco ASAs configured as an Active/Standby failover pair, and two Cisco WSAs.
  D. One Cisco ASA or two Cisco ASAs configured as an Active/Active failover pair, and two Cisco WSAs.
  E. Two Cisco ASAs and one Cisco WSA.
  F. Two Cisco ASAs and two Cisco WSAs.
  A. One Cisco ASA or two Cisco ASAs configured as an Active/Standby failover pair, and one Cisco WSA.

  ---

  We can see from the output that the number of routers (ASA's) is 1, so there is a single ASA or an active/ standby pair being used, and 1 Cache Engine. If the ASA's were in a active/active role it would show up as 2 routers.

• Question 428:

  Which object can be used on a Cisco FirePOWER appliance, but not in an access control policy rule on Cisco FirePOWER services running on a Cisco ASA?

  A. URL
  B. security intelligence
  C. VLAN
  D. geolocation
  C. VLAN

• Question 429:

  How many interfaces can a Cisco ASA bridge group support and how many bridge groups can a Cisco ASA appliance support?

  A. up to 2 interfaces per bridge group and up to 4 bridge groups per Cisco ASA appliance
  B. up to 2 interfaces per bridge group and up to 8 bridge groups per Cisco ASA appliance
  C. up to 4 interfaces per bridge group and up to 4 bridge groups per Cisco ASA appliance up to 4 interfaces per bridge group and up to 8 bridge groups per Cisco ASA appliance
  D. up to 8 interfaces per bridge group and up to 4 bridge groups per Cisco ASA appliance
  E. up to 8 interfaces per bridge group and up to 8 bridge groups per Cisco ASA appliance
  D. up to 8 interfaces per bridge group and up to 4 bridge groups per Cisco ASA appliance

• Question 430:

  When the WSA policy trace tool is used to make a request to the proxy, where is the request logged?

  A. proxy logs
  B. access logs
  C. authentication logs
  D. The request is not logged
  B. access logs