Cisco 300-210 Study Guides 2021

NEW QUESTION 1
A customer is concerned with their employee’s internet usage and has asked for more web traffic control. Which two features of the cisco web security appliance help with issue? (choose two)

• A. Advanced Malware Protection
• B. Dynamic ARP Inspection
• C. DHCP spoofing Protection
• D. Network Address Translation
• E. Application Visibility and Control

Answer: AE

NEW QUESTION 2
Which IPS feature allows you to aggregate multiple IPS links over a single port channel?

• A. UDLD
• B. ECLB
• C. LACP
• D. PAgP

Answer: B

NEW QUESTION 3
Which centralized reporting function of the Cisco Content Security Management Appliance aggregates data from multiple Cisco ESA devices?

• A. message tracking
• B. web tracking
• C. system tracking
• D. logging

Answer: A

NEW QUESTION 4
An ASA with an IPS module must be configured to drop traffic matching IPS signatures and block all traffic if the module fails. Which describes the correct configuration?

• A. Inline Mode, Permit Traffic
• B. Inline Mode, Close Traffic
• C. Promiscuous Mode, Permit Traffic
• D. Promiscuous Mode, Close Traffic

Answer: B

NEW QUESTION 5
How does the WSA policy trace tool make a request to the Proxy to emulate a client request?

• A. explicitly
• B. transparently
• C. via WCCP
• D. via policy-based routing

Answer: D

NEW QUESTION 6
Which two statements regarding the basic setup of the Cisco CX for services are correct? (Choose two.)

• A. The Packet capture feature is available for either permitted or dropped packets by default.
• B. Public Certificates can be used for HTTPS Decryption policies.
• C. Public Certificates cannot be used for HTTPS Decryption policies.
• D. When adding a standard LDAP realm, the group attribute will be UniqueMember.
• E. The Packet capture features is available for permitted packets by default.

Answer: CE

NEW QUESTION 7
How are HTTP requests handled by the Cisco WSA?

• A. transparent request has a destination IP address of the configured proxy.
• B. The URI for an implicit request doest not contain the DNS host.
• C. An explict request has a destination IP address of the intended web server.
• D. The URI for an explicit request contains the host with the protocol information.

Answer: D

NEW QUESTION 8
Which characteristic is unique to a Cisco Web Security Virtual Appliance as compared to a physical appliance?

• A. requires an additional
• B. performance transparent redirection
• C. supports VMware vMotion on VMware ESXi
• D. supports SSL decryption

Answer: C

NEW QUESTION 9
What are three benefits of the Cisco AnyConnect Secure Mobility Solution? (Choose three.)

• A. It can protect against command-injection and directory-traversal attacks.
• B. It provides Internet transport while maintaining corporate security policies.
• C. It provides secure remote access to managed computers.
• D. It provides clientless remote access to multiple network-based systems.
• E. It enforces security policies, regardless of the user location.
• F. It uses ACLs to determine best-route connections for clients in a secure environment.

Answer: BCE

NEW QUESTION 10
A network engineer may use which three types of certificates when implementing HTTPS decryption services on the ASACX? (Choose three.)

• A. Self Signed Server Certificate
• B. Self Signed Root Certificate
• C. Microsoft CA Server Certificate
• D. Microsoft CA Subordinate Root Certificate
• E. LDAP CA Server Certificate
• F. LDAP CA Root Certificate
• G. Public Certificate Authority Server Certificate
• H. Public Certificate Authority Root Certificate

Answer: BDF

NEW QUESTION 11
Which two options are features of the Cisco Email Security Appliance? (Choose two.)

• A. Cisco Anti-Replay Services
• B. Cisco Destination Routing
• C. Cisco Registered Envelope Service
• D. Cisco IronPort SenderBase Network

Answer: CD

NEW QUESTION 12
By default, which access rule is applied inbound to the inside interface?

• A. All IP traffic is denied.
• B. All IP traffic is permitted.
• C. All IP traffic sourced from any source to any less secure network destinations is permitted.
• D. All IP traffic sourced from any source to any more secure network destinations is permitted

Answer: C

NEW QUESTION 13
Drag and drop the terms on the left onto the correct definition for the promiscuous IPS risk rating calculation on the right.

Answer:

Explanation: Reference:
http://www.cisco.com/c/en/us/products/collateral/security/ips-4200-seriessensors/prod_white_paper0
900aecd806e7299.html

NEW QUESTION 14
Which statement about the Cisco CWS web filtering policy behavior is true?

• A. Rules are comprised of three criteria and an action.
• B. By default, the schedule is set to office hours.
• C. At least one rule applies to a web request.
• D. In the evaluation of a rule set, the best match wins.

Answer: A

NEW QUESTION 15
Which set of commands changes the FTP client timeout when the sensor is communicating with an FTP server?

• A. sensor# configure terminal sensor(config)# service sensor sensor(config-hos)# network-settings sensor(config-hos-net)# ftp-timeout 500
• B. sensor# configure terminal sensor(config)# service hostsensor(config-hos)# network-settings parameter ftp sensor(config-hos-net)# ftp-timeout 500
• C. sensor# configure terminal sensor(config)# service host sensor(config-hos)# network-settings sensor(config-hos-net)# ftp-timeout 500
• D. sensor# configure terminalsensor(config)# service network sensor(config-hos)# network-settings sensor(config-hos-net)# ftp-timeout 500

Answer: C

NEW QUESTION 16
When you configure the Cisco ESA to perform blacklisting, what are two items you can disable to enhance performance? (Choose two.)

• A. rootkit detection
• B. spam scanning
• C. APT detection
• D. antivirus scanning
• E. URL filtering

Answer: BD

NEW QUESTION 17
Refer to the Following. Which option describe the result of this configuration on a Cisco ASA firewall?
asafwl (config) #http server enable asafw1(config)#http 10.10.10.1 255.255.255.255 inside

• A. The firewall allows command-line access from 10.10.10.1
• B. The firewall allows ASDM access from a client on 10.10.10.1
• C. The management IP address of the firewall is 10.10.10.1
• D. The inside interface IP address of the firewall is 10.10.10.1

Answer: B