Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 461:

  Refer to the following.

  Router (config) #username admin secret cisco

  Router (config) #no service password-encryption

  How is the "cisco" password stored?

  A. As MD5 hash
  B. As Type 0
  C. As Type 7
  D. As Clear Text
  A. As MD5 hash

• Question 462:

  What Event Action in an IPS signature is used to stop an attacker from communicating with a network using an access-list?

  A. Request Block Host
  B. Deny Attacker Inline
  C. Deny Connection Inline
  D. Deny Packet Inline
  E. Request Block Connection
  A. Request Block Host

• Question 463:

  What command is used to test authentication on the Cisco WSA?

  A. testauthconfig
  B. setntlmsecuritymode
  C. authconfig
  D. Other command
  A. testauthconfig

  ---

  Tests the authentication settings for a given authentication realm against the authentication servers defined in the realm. testauthconfig [-d level] [realm name]Running the command without any option causes the appliance to list the configured authentication realms from which you can make a selection.The debug flag ( -d ) controls the level of debug information. The levels can range between 0-10. If unspecified, the appliance uses a level of 0. With level 0, the command will return success or failure. If the test settings fail, the command will list the cause of the failure.Link: https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_appendix_010.html

• Question 464:

  What is a value that Cisco ESA can use for tracing mail flow?

  A. the FQDN of the source IP address
  B. the FQDN of the destination IP address
  C. the destination IP address
  D. the source IP address
  A. the FQDN of the source IP address

• Question 465:

  Which SSL traffic decryption feature is used when decrypting traffic from an external host to server on your network?

  A. decrypt by stripping the server certificate
  B. decrypt with a known public key
  C. decrypt by resigning the server certificate
  D. decrypt with a known private key
  D. decrypt with a known private key

• Question 466:

  

  What is the maximum number of recipients per hour that the Cisco Email Security Appliance will accept from the green. public domain?

  B. 1
  C. 20
  D. 25
  E. 50
  F. 5000
  G. Unlimited
  C. 20

• Question 467:

  Your organization has subscribed to the Cisco Cloud Web Security (CWS) service. You have been assigned the task of configuring the CWS connector on the ISR-G2 router at a branch office. Details of the configuration requirements include:

  -

  Content scanning should be enabled for traffic outbound from FastEthernet0/1.

  -

  Explicitly specify 8080 for both the http and the https ports.

  -

  The primary CWS proxy server is proxy-a.scansafe.net.

  -

  The secondary CWS proxy server is proxy-b.scansafe.net .

  -

  The unencrypted license key is 0123456789abcdef

  -

  If the CWS proxy servers are not available. web traffic from the branch office should be denied .

  -

  After configuration, use show commands to verify connectivity with the CWS service and scan activity You can access the console of the ISR at the branch office using the icon on the topology display. The enable password is Cisco!23

  

  With Firepower Threat Defense, which two interface settings are required when configuring a routed interface? (Choose two.)

  A. Speed
  B. Duplex
  C. Media Type
  D. Redundant Interface
  E. EtherChannel
  A. Speed
  B. Duplex

• Question 468:

  Which option describes how the native VLAN is set up on an IPS sensor when VLAN groups are used in an inline deployment of the sensor?

  A. The sensor looks at the native VLAN setup on the switch to determine the correct native VLAN to use.
  B. The sensor does not care about VLANs.
  C. A default VLAN variable must be associated with each physical interface on the sensor.
  D. There is no way to set this, so you need to tag all traffic.
  E. ISL links are only supported.
  C. A default VLAN variable must be associated with each physical interface on the sensor.

• Question 469:

  What are three features of the Cisco Security Intellishield Alert Manager Service? (Choose three.)

  A. validation of alerts by security analysts
  B. custom notifications
  C. complete threat and vulnerability remediation
  D. vendor-specific threat analysis
  E. workflow-management tools
  F. real-time threat and vulnerability mitigation
  A. validation of alerts by security analysts
  B. custom notifications
  E. workflow-management tools

• Question 470:

  Which access control policy action must be selected to inspect traffic for malware using cisco AMP for Networks?

  A. monitor
  B. inspect
  C. trust
  D. allow
  D. allow