Cisco 300-210 Exam Questions 2021

NEW QUESTION 1
Which five system management and reporting protocols are supported by the Cisco Intrusion Prevention System? (Choose five.)

• A. SNMPv2c
• B. SNMPv1
• C. SNMPv2
• D. SNMPv3
• E. syslog
• F. SDEE
• G. SMTP

Answer: ABCFG

NEW QUESTION 2
The Web Cache Communication Protocol (WCCP) is a content-routing protocol that can facilitate the redirection of traffic flows in real time. Your organization has deployed WCCP to redirect web traffic that traverses their Cisco Adaptive Security Appliances (ASAs) to their Cisco Web Security Appliances (WSAs).
The simulator will provide access to the graphical user interfaces of one Cisco ASA and one Cisco WSA that are participating in a WCCP service. Not all aspects of the GUIs are implemented in the simulator. The options that have been implemented are sufficient to determine the best answer to each of the questions that are presented.
Your task is to examine the details available in the simulated graphical user interfaces and select the best answer.




How many Cisco ASAs and how many Cisco WSAs are participating in the WCCP service?

• A. One Cisco ASA or two Cisco ASAs configured as an Active/Standby failover pair, and one Cisco WSA.
• B. One Cisco ASA or two Cisco ASAs configured as an Active/Active failover pair, and one Cisco WSA.
• C. One Cisco ASA or two Cisco ASAs configured as an Active/Standby failover pair, and two Cisco WSAs.
• D. One Cisco ASA or two Cisco ASAs configured as an Active/Active failover pair, and two Cisco WSAs.
• E. Two Cisco ASAs and one Cisco WSA.
• F. Two Cisco ASAs and two Cisco WSAs.

Answer: A

Explanation: We can see from the output that the number of routers (ASA’s) is 1, so there is a single ASA or an active/ standby pair being used, and 1 Cache Engine. If the ASA’s were in a active/active role it would show up as 2 routers.

NEW QUESTION 3
Which Cisco Cloud Web Security Connector feature allows access by all of an organization's users while applying Active Directory group policies?

• A. a company authentication key
• B. a group authentication key
• C. a PAC file
• D. proxy forwarding
• E. a user authentication key

Answer: A

NEW QUESTION 4
Which command is used on the cisco firepower threat defense to send logs to cisco tac?

• A. sudo_
• B. tac

Answer: B

NEW QUESTION 5




What is the maximum message size that the Cisco Email Security Appliance will accept from the violet.public domain?

• A. 1 KB
• B. 100 KB
• C. 1 MB
• D. 10 MB
• E. 100 MB
• F. Unlimited

Answer: D

NEW QUESTION 6
An IPS is configured to fail-closed and you observe that all packets are dropped. What is a possible reason for this behavior?

• A. Mainapp is unresponsive.
• B. The global correlation update failed.
• C. The IPS span session failed.
• D. The attack drop file is misconfigured.

Answer: A

NEW QUESTION 7
Which two conditions must you configure in an event action override to implement a risk rating of 70 or
higher and terminate the connection on the IPS? (Choose two.)

• A. Configure the event action override to send a TCP reset.
• B. Set the risk rating range to 70 to 100.
• C. Configure the event action override to send a block-connection request.
• D. Set the risk rating range to 0 to 100.
• E. Configure the event action override to send a block-host request.

Answer: AB

NEW QUESTION 8
Which Cisco deployment architectures support Clustering? (Choose 2).

• A. Cisco FirePOWER Management Center
• B. Cisco ASAv
• C. Cisco FirePOWER Appliances (NGIPS)
• D. Cisco ASA with FirePOWER Services

Answer: CD

NEW QUESTION 9
Which two types of software can be installed on a FP-9300 appliance? (Choose two.)

• A. Cisco Firepower Appliance
• B. Cisco ASA
• C. Cisco Firepower Management Center
• D. Cisco Firepower Service
• E. Cisco Firepower Threat Defense

Answer: CE

NEW QUESTION 10
Which option is a benefit of a Cisco Email Security Virtual Appliance as compared to a physical Cisco ESA?

• A. simplifies the distribution of software updates
• B. enables the allocation of additional resources
• C. provides faster performance
• D. provides an automated setup process

Answer: B

NEW QUESTION 11
Which four statements are correct regarding management access to a Cisco Intrusion Prevention System? (Choose four.)

• A. The Telnet protocol is enabled by default
• B. The Telnet protocol is disabled by default
• C. HTTP is enabled by default
• D. HTTP is disabled by default
• E. SSH is enabled by default
• F. SSH is disabled by default
• G. HTTPS is enabled by default
• H. HTTPS is disabled by default

Answer: BDEG

NEW QUESTION 12
The helpdesk was asked to provide a record of delivery for an important email message that a customer claims it did not receive. Which feature of the Cisco Email Security Appliance provides this record?

• A. Outgoing Mail Reports
• B. SMTP Routes
• C. Message Tracking
• D. Scheduled Reports
• E. System Administration

Answer: C

NEW QUESTION 13
Which piece of information is required to perform a policy trace for the Cisco WSA?

• A. the URL to trace
• B. the source IP address of the trace
• C. authentication credentials to make the request
• D. the destination IP address of the trace

Answer: A

NEW QUESTION 14
An engineer manages a Cisco Intrusion Prevention System via IME. A new user must be able to tune signatures, but must not be able to create new users. Which role for the new user is correct?

• A. viewer
• B. service
• C. operator
• D. administrator

Answer: C

Explanation:
http://www.cisco.com/c/en/us/td/docs/security/ips/7-0/command/reference/cmdref/crIntro.html

NEW QUESTION 15
An engineer is using policy trace tool to debug how a message is processed by the ESA. Which option is the expected behavior from the tool?

• A. The sections of configuration tested by the tool are performed in a random order.
• B. A message body cannot be populated via an upload.
• C. The test message created by the tool is distributed.
• D. A message is emulated as being accepted by a listener

Answer: D

NEW QUESTION 16
Which three zones are used for anomaly detection in a Cisco IPS? (Choose three.)

• A. internal zone
• B. external zone
• C. illegal zone
• D. inside zone
• E. outside zone
• F. DMZ zone

Answer: ABC

NEW QUESTION 17
Which configuration option causes an ASA with IPS module to drop traffic matching IPS signatures and to block all traffic if the module fails?

• A. Inline Mode, Permit Traffic
• B. Inline Mode, Close Traffic
• C. Promiscuous Mode, Permit Traffic
• D. Promiscuous Mode, Close Traffic

Answer: B