Download 300-207 Exam Questions 2021

NEW QUESTION 1
Which four methods are used to deploy transparent mode traffic redirection? (Choose four.)

• A. PAC files
• B. Web Cache Communication Protocol
• C. policy-based routing
• D. Microsoft GPO
• E. Layer 4 switch
• F. DHCP server
• G. Layer 7 switch
• H. manual browser configuration

Answer: BCEG

NEW QUESTION 2
Which type of signature is generated by copying a default signature and modifying its behavior?

• A. meta
• B. custom
• C. atomic
• D. normalized

Answer: B

NEW QUESTION 3
When a Cisco Email Security Appliance joins a cluster, which four settings are inherited? (Choose four.)

• A. IP address
• B. DNS settings
• C. SMTP routes
• D. HAT
• E. RAT
• F. hostname
• G. certificates

Answer: BCDE

NEW QUESTION 4
Which IPS signature regular expression CLI command matches a host issuing a domain lookup for www.theblock.com?

• A. regex-string (x03[Tt][Hh][Ee]x05[Bb][Ll][Oo][Cc][Kk])
• B. regex-string (x0b[theblock.com])
• C. regex-string (x03[the]x05[block]0x3[com])
• D. regex-string (x03[T][H][E]x05[B][L][O][C][K]x03[.][C][O][M]

Answer: A

NEW QUESTION 5
A Cisco Web Security Appliance's policy can provide visibility and control of which two elements? (Choose two.)

• A. Voice and Video Applications
• B. Websites with a reputation between -100 and -60
• C. Secure websites with certificates signed under an unknown CA
• D. High bandwidth websites during business hours

Answer: CD

NEW QUESTION 6
When you create a new server profile on the Cisco ESA, which subcommand of the ldapconfig command configures spam quarantine end-user authentication?

• A. isqauth
• B. isqalias
• C. test
• D. server

Answer: A

NEW QUESTION 7
Which Cisco Security IntelliShield Alert Manager Service component mitigates new botnet, phishing, and web-based threats?

• A. the IntelliShield Threat Outbreak Alert
• B. IntelliShield Alert Manager vulnerability alerts
• C. the IntelliShield Alert Manager historical database
• D. the IntelliShield Alert Manager web portal
• E. the IntelliShield Alert Manager back-end intelligence engine

Answer: A

NEW QUESTION 8
Refer to the exhibit.




For which domains will the Cisco Email Security Appliance allow up to 5000 recipients per message?

• A. viole
• B. public
• C. viole
• D. public and blu
• E. public
• F. viole
• G. Public, blu
• H. Public and green.public
• I. re
• J. public orang
• K. publicre
• L. public and orang
• M. public

Answer: B

NEW QUESTION 9
How are HTTP requests handled by the Cisco WSA?

• A. transparent request has a destination IP address of the configured proxy.
• B. The URI for an implicit request doest not contain the DNS host.
• C. An explict request has a destination IP address of the intended web server.
• D. The URI for an explicit request contains the host with the protocol information.

Answer: D

NEW QUESTION 10
Which option describes a customer benefit of the Cisco Security IntelliShield Alert Manager?

• A. It provides access to threat and vulnerability information for Cisco related products only.
• B. It consolidates vulnerability information from an internal Cisco source, which allows security personnel to focus on remediation and proactive protection versus research.
• C. It provides effective and timely security intelligence via early warnings about new threats and technology vulnerabilities.
• D. It enhances the efficiency of security staff with accurate, noncustomizable threat intelligence, critical remediation information, and easy-to-use workflow tools.

Answer: C

NEW QUESTION 11
Cisco’s ASA CX includes which two URL categories? (Choose two.)

• A. Proxy Avoidance
• B. Dropbox
• C. Hate Speech
• D. Facebook
• E. Social Networking
• F. Instant Messaging and Video Messaging

Answer: CE

NEW QUESTION 12
Which feature of the Cisco Hybrid Email Security services enables you to create multiple email senders on a single Cisco ESA?

• A. Virtual Gateway
• B. Sender Groups
• C. Mail Flow Policy Connector
• D. Virtual Routing and Forwarding
• E. Email Marketing Connector

Answer: A

NEW QUESTION 13
What is the authentication method for an encryption envelope that is set to medium security?

• A. The recipient must always enter a password, even if credentials are cached.
• B. A password is required, but cached credentials are permitted.
• C. The recipient must acknowledge the sensitivity of the message before it opens.
• D. The recipient can open the message without authentication.

Answer: B

NEW QUESTION 14
Which IPS feature allows you to aggregate multiple IPS links over a single port channel?

• A. UDLD
• B. ECLB
• C. LACP
• D. PAgP

Answer: B

NEW QUESTION 15
What is the default antispam policy for positively identified messages?

• A. Drop
• B. Deliver and Append with [SPAM]
• C. Deliver and Prepend with [SPAM]
• D. Deliver and Alternate Mailbox

Answer: C

NEW QUESTION 16
When you deploy a sensor to send connection termination requests, which additional traffic-monitoring function can you configure the sensor to perform?

• A. Monitor traffic as it flows to the sensor.
• B. Monitor traffic as it flows through the sensor.
• C. Monitor traffic from the Internet only.
• D. Monitor traffic from both the Internet and the intranet.

Answer: B

NEW QUESTION 17
Which option describes the role of the Learning Accept Mode for anomaly detection?

• A. It detects ongoing attacks and adds them to a database.
• B. It configures the anomaly detection zones.
• C. It identifies incomplete connections and flags them.

Answer: A

Explanation: Explanation http://www.cisco.com/c/en/us/td/docs/security/security_management/cisco_security_manag er/sec urity_manager/4-0/user/guide/CSMUserGuide_wrapper/ipsanom.html

NEW QUESTION 18
Which two statements about Cisco Cloud Web Security functionality are true? (Choose two.)

• A. It integrates with Cisco Integrated Service Routers.
• B. It supports threat avoidance and threat remediation.
• C. It extends web security to the desktop, laptop, and PDA.
• D. It integrates with Cisco ASA Firewalls.

Answer: AD

NEW QUESTION 19
Refer to the following.
Router (config) #username admin secret cisco Router (config) #no service password-encryption
How is the “cisco” password stored?

• A. As Type 0
• B. As Type 7
• C. As Clear Text

Answer: A