Cisco 300-210 Online Practice Questions and Exam Preparation

Cisco 300-210 Online Questions & Answers

• Question 81:

  A web security appliance is inspecting inbound traffic. In which sequence is inbound https traffic inspected?

  A. Routing Policy > Decryption Policy > Access Policy
  B. Access Policy > Decryption Policy > Routing Policy
  C. Routing Policy > Access Policy > Decryption Policy
  D. Decryption Policy > Access Policy > Routing Policy
  E. Decryption Policy > Routing Policy > Access Policy
  F. Access Policy > Routing Policy > Decryption Policy
  E. Decryption Policy > Routing Policy > Access Policy

• Question 82:

  When creating an SSL policy on Cisco FirePOWER, which three options do you have

  A. do not decrypt
  B. trust
  C. allow
  D. block with reset
  E. block
  F. encrypt
  A. do not decrypt
  D. block with reset
  E. block

  ---

  http://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/200202-Configuration-of-an-SSL -Inspection-Polic.html

• Question 83:

  Refer to the exhibit.

  

  Which four rows exhibit the correct WCCP service to protocol assignments? (Choose four.)

  A. Row 1
  B. Row 2
  C. Row 3
  D. Row 4
  E. Row 5
  F. Row 6
  G. Row 7
  H. Row 8
  B. Row 2
  D. Row 4
  F. Row 6
  H. Row 8

• Question 84:

  A network engineer may use which three types of certificates when implementing HTTPS decryption services on the ASA CX? (Choose three.)

  A. Self Signed Server Certificate
  B. Self Signed Root Certificate
  C. Microsoft CA Server Certificate
  D. Microsoft CA Subordinate Root Certificate
  E. LDAP CA Server Certificate
  F. LDAP CA Root Certificate
  G. Public Certificate Authority Server Certificate
  H. Public Certificate Authority Root Certificate
  B. Self Signed Root Certificate
  D. Microsoft CA Subordinate Root Certificate
  F. LDAP CA Root Certificate

• Question 85:

  Which license is required for Cisco Security Intelligence to work on the Cisco Next Generation Intrusion Prevention System?

  A. control
  B. malware
  C. URL filtering
  D. protect
  C. URL filtering

• Question 86:

  

  

  Which two statements about Signature 1104 are true? (Choose two.)

  A. This is a custom signature.
  B. The severity level is High.
  C. This signature has triggered as indicated by the red severity icon.
  D. Produce Alert is the only action defined.
  E. This signature is enabled, but inactive, as indicated bythe/0 to that follows the signature number.
  B. The severity level is High.
  D. Produce Alert is the only action defined.

  ---

  This can be seen here where signature 1004 is the 5th one down:

  

• Question 87:

  Which two types of security applications can be installed on a Firepower Security Appliance 4100? (Choose two.)

  A. Cisco Firepower
  B. Cisco Firepower Management Center
  C. Cisco Firepower threat Defense
  D. Cisco ASA
  E. Cisco Firepower Appliance
  B. Cisco Firepower Management Center
  C. Cisco Firepower threat Defense

• Question 88:

  A network engineer can assign IPS event action overrides to virtual sensors and configure which three modes? (Choose three.)

  A. Anomaly detection operational mode
  B. Inline TCP session tracking mode
  C. Normalizer mode
  D. Load-balancing mode
  E. Inline and Promiscuous mixed mode
  F. Fail-open and fail-close mode
  A. Anomaly detection operational mode
  B. Inline TCP session tracking mode
  C. Normalizer mode

• Question 89:

  Which three search parameters are supported by the Email Security Monitor? (Choose three.)

  A. Destination domain
  B. Network owner
  C. MAC address
  D. Policy requirements
  E. Internal sender IP address
  F. Originating domain
  A. Destination domain
  B. Network owner
  E. Internal sender IP address

• Question 90:

  Which two products can get file disposition information from the Cisco Advance Malware protection cloud? (Choose two.)

  A. Cisco identify Service Engine
  B. Cisco Email Security Appliance
  C. Cisco Email Security Appliance
  D. Cisco AnyConnect
  E. Cisco Advanced Malware protection threat Grind
  C. Cisco Email Security Appliance
  E. Cisco Advanced Malware protection threat Grind