Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 61:

  Refer to the Following. Which option describe the result of this configuration on a Cisco ASA firewall?

  asafwl (config) #http server enable

  asafw1(config)#http 10.10.10.1 255.255.255.255 inside

  A. The firewall allows command-line access from 10.10.10.1
  B. The firewall allows ASDM access from a client on 10.10.10.1
  C. The management IP address of the firewall is 10.10.10.1
  D. The inside interface IP address of the firewall is 10.10.10.1
  B. The firewall allows ASDM access from a client on 10.10.10.1

• Question 62:

  Which two options are the correct URL and credentials used to access the Cisco Web Security Appliance for the first time? (Choose two.)

  A. admin/password
  B. http://192.168.1.1:8080
  C. ironport/ironport
  D. http://192.168.42.42:8080
  E. admin/ironport
  F. http://192.168.42.42:8443
  D. http://192.168.42.42:8080
  E. admin/ironport

• Question 63:

  When using Cisco AMP for Networks, which feature copies a file to the Cisco AMP cloud for analysis?

  A. Spero analysis
  B. dynamic analysis
  C. sandbox analysis
  D. malware analysis
  B. dynamic analysis

• Question 64:

  Which option is a benefit of Cisco hybrid email security?

  A. on-premises control of outbound data
  B. advanced malware protection
  C. email encryption
  D. message tracking
  A. on-premises control of outbound data

• Question 65:

  Which option describes what occurs with asymmetric routing when an IPS normalization engine is enable?

  A. It allows the return packets back to the source path.
  B. It must see a valued SYN/ACK before it lets a flow pass, otherwise the IPS normalization engine assumes that is is encountering a fragmentation attack, and it drops the return packets
  C. It must see a valid ACK/ACK before it lets a flow pass.
  D. It must see a valid SYN/ACK before it lets a flow pass, otherwise the IPS normalization engine assumes that it is in encountering an evasion attack and drops the return packets.
  D. It must see a valid SYN/ACK before it lets a flow pass, otherwise the IPS normalization engine assumes that it is in encountering an evasion attack and drops the return packets.

• Question 66:

  Which three features does Cisco CX provide? (Choose three.)

  A. HTTPS traffic decryption and inspection
  B. Application Visibility and Control
  C. Category or reputation-based URL filtering
  D. Email virus scanning
  E. Application optimization and acceleration
  F. VPN authentication
  A. HTTPS traffic decryption and inspection
  B. Application Visibility and Control
  C. Category or reputation-based URL filtering

• Question 67:

  Which three options are valid event actions for a Cisco IPS? (Choose three.)

  A. deny-packet-inline
  B. deny-attack-reset
  C. produce-verbose-alert
  D. log-attacker-packets
  E. deny-packet-internal
  F. request-block-drop-connection
  A. deny-packet-inline
  C. produce-verbose-alert
  D. log-attacker-packets

• Question 68:

  

  A. Check the answer below
  A. Check the answer below

  ---

  Answer: Review the explanation part for full solution. We need to create a policy map named inside-policy and send the traffic to the CXSC blade:

  ASA-FW# config t ASA-FW(config)# policy-map inside-policy ASA-FW(config-pmap)# policy-map inside-policy ASA-FW(config-pmap)# class class-default ASA-FW(config-pmap-c)# cxsc fail-close auth-proxy ASA-FW(config-pmap-c)# exit ASA-FW(config-pmap)# exit

  The fail-close is needed as per instructions that if the CX module fails, no traffic should be allowed. The auth-proxy keyword is needed for active authentication.

  Next, we need to apply this policy map to the inside interface:

  ASA-FW(config)#service-policy inside-policy interface inside.

  Finally, verify that the policy is active:

  ASA-FW# show service-policy interface inside Interface inside: Service-policy: inside-policy Class-map: class-default Default QueueingCXSC: card status Up, mode fail-close, auth-proxy enabled Packet input 181, packet output 183, drop 0, reset-drop 0, proxied 0

  Configuration guidelines can be found at this reference link:

• Question 69:

  Which CLI command is used to generate firewall debug messages on a Cisco FirePOWER sensor?

  A. system support ssl-debug
  B. system support firewall-engine-debug
  C. system support capture-traffic D. system support platform
  B. system support firewall-engine-debug

• Question 70:

  Which of the following are Cisco FirePOWER Application Layer Preprocessors? (Choose 2).

  A. SIP preprocessor
  B. HTTP preprocessor
  C. ICMP preprocessor
  D. Modbus
  A. SIP preprocessor
  B. HTTP preprocessor

  ---

  ?The SIP PreprocessorThe Session Initiation Protocol (SIP) provides call setup, modification, and teardown of one or more sessions for one or more users of client applications such asInternet telephony, multimedia conferencing, instant messaging, online gaming, and file transfer. A methodfield in each SIP request identifies the purpose of the request, and a Request-URI specifies where to send the request. A status code in each SIP response indicates the outcome of the requested action.After calls are set up using SIP, the Real-time Transport Protocol (RTP) is responsible for subsequent audio and video communication; this part of the session is sometimes referred to as the call channel, the data channel, or the audio/video data channel. RTP uses the Session Description Protocol (SDP) within the SIP message body for data-channel parameter negotiation, session announcement, and session invitation.?The HTTP Inspect PreprocessorThe HTTP Inspect preprocessor is responsible for:decoding and normalizing HTTP requests sent to and HTTP responses received from web servers on your network separating messages sent to web servers into URI, non-cookie header, cookie header, method, and message body components to improve performance of HTTPrelated intrusion rules separating messages received from web servers into status code, status message, non-set-cookie header, cookie header, and response body components to improve performance of HTTP-related intrusion rules detecting possible URI-encoding attacks making the normalized data available for additional rule processingLink: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Application_Layer_Preprocessors.html#ID-2244-0000080c