Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 431:

  Which IPS signature engine inspects the IP protocol packets and the Layer TCP?

  A. String TCP
  B. Atomic TCP
  C. Service HTTP
  D. Atomic IP
  D. Atomic IP

• Question 432:

  An engineer is configuring AMP for the first time and can't afford any interruption to which traffic.

  Which policy type does not disrupt?

  A. Triage
  B. Audit
  C. Server
  D. Protect
  B. Audit

• Question 433:

  By default, which access rule is applied inbound to the inside interface?

  A. All IP traffic is denied.
  B. All IP traffic is permitted.
  C. All IP traffic sourced from any source to any less secure network destinations is permitted.
  D. All IP traffic sourced from any source to any more secure network destinations is permitted
  C. All IP traffic sourced from any source to any less secure network destinations is permitted.

• Question 434:

  What is retrospective alerting in Cisco Advanced Malware Protection for Endpoints?

  A. alerts when a file changes disposition
  B. alerts on events over a week old
  C. alerts showing previously installed malware
  D. alerts on previously blacklisted applications
  C. alerts showing previously installed malware

• Question 435:

  Which two commands are valid URL filtering commands? (Choose two.)

  A. url-server (DMZ) vendor smartfilter host 10.0.1.1
  B. url-server (DMZ) vendor url-filter host 10.0.1.1
  C. url-server (DMZ) vendor n2h2 host 10.0.1.1
  D. url-server (DMZ) vendor CISCO host 10.0.1.1
  E. url-server (DMZ) vendor web host 10.0.1.1
  A. url-server (DMZ) vendor smartfilter host 10.0.1.1
  C. url-server (DMZ) vendor n2h2 host 10.0.1.1

• Question 436:

  An engineer wants to cluster an existing ESA physical appliance with an ESA virtual appliance. Which statement is true?

  A. This action is possible as long as the devices are running the identical AsyncOS
  B. This action is not possible for virtual appliances
  C. This action is possible between different models and OS
  D. This action is not possible because the devices are not identical models
  A. This action is possible as long as the devices are running the identical AsyncOS

• Question 437:

  With Cisco FirePOWER Threat Defense software, which interface mode do you configure for an IPS deployment, where traffic passes through the appliance but does not require VLAN rewriting?

  A. inline set
  B. passive
  C. inline tap
  D. routed
  E. transparent
  E. transparent

• Question 438:

  

  

  What is the maximum number of recipients per hour that the Cisco Email Security Appliance will accept from the green. public domain?

  B. 1
  C. 20
  D. 25
  E. 50
  F. 5000
  G. Unlimited
  C. 20

• Question 439:

  Which Cisco deployment architectures support Clustering? (Choose 2).

  A. Cisco FirePOWER Management Center
  B. Cisco ASAv
  C. Cisco FirePOWER Appliances (NGIPS)
  D. Cisco ASA with FirePOWER Services
  C. Cisco FirePOWER Appliances (NGIPS)
  D. Cisco ASA with FirePOWER Services

• Question 440:

  Which characteristic is unique to a Cisco Web Security Virtual Appliance as compared to a physical appliance?

  A. requires an additional
  B. performance transparent redirection
  C. supports VMware vMotion on VMware ESXi
  D. supports SSL decryption
  C. supports VMware vMotion on VMware ESXi

  ---

  https://www.cisco.com/c/dam/en/us/td/docs/security/content_security/virtual_appliances/Cisco_Content_Security_Virtual_Appliance_Install_Guide.pdf