Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 71:

  How does a user access a Cisco Web Security Appliance for initial setup?

  A. Connect the console cable and use the terminal at 9600 baud to run the setup wizard.
  B. Connect the console cable and use the terminal at 115200 baud to run the setup wizard.
  C. Open the web browser at 192.168.42.42:8443 for the setup wizard over https.
  D. Open the web browser at 192.168.42.42:443 for the setup wizard over https.
  C. Open the web browser at 192.168.42.42:8443 for the setup wizard over https.

• Question 72:

  Which two connectors can be used to redirect traffic to Cisco CWS for web security functions? (Choose two)

  A. ASA
  B. ISR G2
  A. ASA
  B. ISR G2

• Question 73:

  In WSA , which two pieces of information are required to implement transparent user identification using Context Directory Agent? (Choose two.)

  A. the server name where Context Directory Agent is installed
  B. the server name of the global catalog domain controller
  C. the backup Context Directory Agent
  D. the shared secret
  E. the syslog server IP address
  A. the server name where Context Directory Agent is installed
  D. the shared secret

• Question 74:

  When centralized message tracking is enabled on the Cisco ESA, over which port does the communication to the SMA occur by default?

  A. port 2222/TCP
  B. port 443/TCP
  C. port 25/TCP
  D. port 22/TCP
  D. port 22/TCP

• Question 75:

  Which IPS engine detects ARP spoofing?

  A. Atomic ARP Engine
  B. Service Generic Engine
  C. ARP Inspection Engine
  D. AIC Engine
  A. Atomic ARP Engine

• Question 76:

  Which two software can be installed on a Cisco ASA-5585-X appliance, assuming the proper hardware is also installed?

  A. Cisco Firepower Services
  B. Cisco ASAv
  C. Cisco ASA
  D. CiSco Firepower Appliance
  E. Cisco Firepower Management Center
  A. Cisco Firepower Services
  C. Cisco ASA

• Question 77:

  You ran the ssh generate-key command on the Cisco IPS and now administrators are unable to connect. Which action can be taken to correct the problem?

  A. Replace the old key with a new key on the client.
  B. Run the ssh host-key command.
  C. Add the administrator IP addresses to the trusted TLS host list on the IPS.
  D. Run the ssh authorized-keys command.
  A. Replace the old key with a new key on the client.

• Question 78:

  Which piece of information is required to perform a policy trace for the Cisco WSA?

  A. the destination IP address of the trace
  B. the source IP address of the trace
  C. the URL to trace
  D. authentication credentials to make the request
  C. the URL to trace

• Question 79:

  Which two design considerations are required to add the Cisco Email Security Appliance to an existing mail delivery chain? (Choose two.)

  A. Existing MX records should be maintained and policy routing should be used to redirect traffic to the ESA.
  B. Update the MX records to point to the inbound listener interfaces on the ESA.
  C. Update the MX records to point to the outbound listener interfaces on the ESA.
  D. Different Listeners must be used to handle inbound and outbound mail handling.
  E. The ESA should be connected to the same subnet as the Email Server because it maintains only a single routing table.
  F. The ESA can be connected to a DMZ external to the Email Server because it maintains multiple routing tables.
  G. The ESA can be connected to a DMZ external to the Email Server but it maintains only a single routing table.
  H. Mail Listeners by default can share the same IP interface by defining the routes for sending and receiving.
  B. Update the MX records to point to the inbound listener interfaces on the ESA.
  G. The ESA can be connected to a DMZ external to the Email Server but it maintains only a single routing table.

• Question 80:

  Upon receiving a digital certificate, what are three steps that a Cisco ASA will perform to authenticate the digital certificate? (Choose three.)

  A. The identity certificate validity period is verified against the system clock of the Cisco ASA.
  B. Identity certificates are exchanged during IPsec negotiations.
  C. The identity certificate signature is validated by using the stored root certificate.
  D. The signature is validated by using the stored identity certificate.
  E. If enabled, the Cisco ASA locates the CRL and validates the identity certificate.
  A. The identity certificate validity period is verified against the system clock of the Cisco ASA.
  C. The identity certificate signature is validated by using the stored root certificate.
  E. If enabled, the Cisco ASA locates the CRL and validates the identity certificate.