Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 41:

  

  

  

  

  

  

  

  

  

  

  

  

  The Cisco Email Security Appliance will reject messages from which domains?

  A. red.public
  B. red.public and orange.public
  C. red.public, orange.public and yellow.public
  D. orange.public
  E. violet.public
  F. violet.public and blue.public
  G. None of the listed domains
  G. None of the listed domains

  ---

  The BLOCKED policy rejects messages as shown below:

  

  Capture

  The BLOCKED policy is assigned to the BLACKLIST sender group, and here we see that no senders have been applied to this group:

  

  Capture

• Question 42:

  In addition to the CLI, what is another option to manage a Cisco IPS?

  A. SDEE
  B. Cisco SDM
  C. Cisco IDM
  D. Cisco ISE
  C. Cisco IDM

• Question 43:

  Which four parameters must be defined in an ISAKMP policy when creating an IPsec site-to-site VPN using the Cisco ASDM? (Choose four.)

  A. encryption algorithm
  B. hash algorithm
  C. authentication method
  D. IP address of remote IPsec peer
  E. D-H group
  F. perfect forward secrecy
  A. encryption algorithm
  B. hash algorithm
  C. authentication method
  E. D-H group

• Question 44:

  Which Cisco Cloud Web Security Connector feature allows access by all of an organization's users while applying Active Directory group policies?

  A. a company authentication key
  B. a group authentication key
  C. a PAC file
  D. proxy forwarding
  E. a user authentication key
  A. a company authentication key

• Question 45:

  After adding a remote-access IPsec tunnel via the VPN wizard, an administrator needs to tune the IPsec policy parameters. Where is the correct place to tune the IPsec policy parameters in Cisco ASDM?

  A. IPsec user profile
  B. Crypto Map
  C. Group Policy
  D. IPsec policy
  E. IKE policy
  D. IPsec policy

• Question 46:

  A Cisco Email Security Appliance uses which message filter to drop all executable attachments entering and leaving the Cisco Email Security Appliance?

  A. drop-exE. if (attachment-filename == "\\.exe$") OR (attachment-filetype == "exe") { drop(); }
  B. drop-exE. if (recv-listener == "InboundMail" ) AND ( (attachment-filename == "\\.exe$") OR (attachment-filetype == "exe")) { drop(); }
  C. drop-exe! if (attachment-filename == "\\.exe$") OR (attachment-filetype == "exe") { drop(); }
  D. drop-exe! if (recv-listener == "InboundMail" ) AND ( (attachment-filename == "\\.exe$") OR (attachment-filetype == "exe")) { drop(); }
  A. drop-exE. if (attachment-filename == "\\.exe$") OR (attachment-filetype == "exe") { drop(); }

• Question 47:

  What are two requirements for configuring a hybrid interface in FirePOWER? (Choose two)

  A. virtual network
  B. virtual router
  C. virtual appliance
  D. virtual switch
  E. virtual context
  B. virtual router
  D. virtual switch

  ---

  http://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Hybrid_Interfaces.html

• Question 48:

  Which three user roles are partially defined by default in Prime Security Manager? (Choose three.)

  A. networkoperator
  B. admin
  C. helpdesk
  D. securityoperator
  E. monitoringadmin
  F. systemadmin
  B. admin
  C. helpdesk
  F. systemadmin

• Question 49:

  What is a limitation of the AMP Threatgrid Sandbox?

  A. delayed software updates
  B. the requirement of fully assembled malware
  C. single point of failure
  D. complex setup
  A. delayed software updates

• Question 50:

  Which two types of digital certificate enrollment processes are available for the Cisco ASA security appliance? (Choose two.)

  A. LDAP
  B. FTP
  C. TFTP
  D. HTTP
  E. SCEP
  F. Manual
  E. SCEP
  F. Manual