300-210 | Practical 300-210 Braindumps 2021

NEW QUESTION 1
Which three statements about Cisco CWS are true? (Choose three.)

• A. It provides protection against zero-day threats.
• B. Cisco SIO provides it with threat updates in near real time.
• C. It supports granular application policies.
• D. Its Roaming User Protection feature protects the VPN from malware and data breaches.
• E. It supports local content caching.
• F. Its Cognitive Threat Analytics feature uses cloud-based analysis and detection to block threats outside the network.

Answer: ABC

NEW QUESTION 2
Which command applies WCCP redirection on the inside interface of a Cisco ASA 5500-x firewall?

• A. wccp interface inside 90 redirect in
• B. web-cache interface inside 90 redirect in
• C. wccp interface inside redirect out
• D. wccp web-cache

Answer: A

NEW QUESTION 3
In cisco firePOWER 5.x and 6.0, which type of traffic causes a web page to be displayed by the appliance when Block or Interactive Block is selected as an access control action?

• A. FTP
• B. decrypted HTTP
• C. encrypted HTTP
• D. unencrypted HHTP

Answer: D

NEW QUESTION 4
What is the default antispam policy for positively identified messages within the Cisco Email Security Appliance?

• A. Drop
• B. Deliver and Append with [SPAM]
• C. Deliver and Prepend with [SPAM]
• D. Deliver and Alternate Mailbox

Answer: C

NEW QUESTION 5
Within Cisco IPS anomaly detection, what is the default IP range of the external zone?

• A. 0.0.0.0 0.0.0.0
• B. 0.0.0.0 - 255.255.255.255
• C. 0.0.0.0/8
• D. the network of the management interface

Answer: B

NEW QUESTION 6
With Cisco FirePOWER Threat Defense software, which interface mode do you configure to passively receive traffic that passes the appliance?

• A. transparent
• B. routed
• C. passive
• D. inline set
• E. inline tap

Answer: C

NEW QUESTION 7



What action will the sensor take regarding IP addresses listed as known bad hosts in the Cisco SensorBase network?

• A. Global correlation is configured in Audit mode fortesting the feature without actually denying any hosts.
• B. Global correlation is configured in Aggressive mode, which has a very aggressive effect on deny actions.
• C. It will not adjust risk rating values based on the known bad hosts list.
• D. Reputation filtering is disabled.

Answer: D

Explanation: This can be seen on the Globabl Correlation – Inspection/Reputation tab show below:

NEW QUESTION 8
What three alert notification options are available in Cisco IntelliShield Alert Manager? (Choose three.)

• A. Alert Summary as Text
• B. Complete Alert as an HTML Attachment
• C. Complete Alert as HTML
• D. Complete Alert as RSS
• E. Alert Summary as Plain Text
• F. Alert Summary as MMS

Answer: ABC

NEW QUESTION 9
Refer to the exhibit.

Which four rows exhibit the correct WCCP service to protocol assignments? (Choose four.)

• A. Row 1
• B. Row 2
• C. Row 3
• D. Row 4
• E. Row 5
• F. Row 6
• G. Row 7
• H. Row 8

Answer: BDFH

NEW QUESTION 10
When does the Cisco ASA send traffic to the Cisco ASA IPS module for analysis?

• A. before firewall policy are applied
• B. after outgoing VPN traffic is encrypted
• C. after firewall policies are applied
• D. before incoming VPN traffic is decrypted.

Answer: C

NEW QUESTION 11
What are 2 types or forms of suppression on a FirePower policy (or FTD)?

• A. source
• B. port
• C. rule
• D. protocol
• E. application

Answer: AC

NEW QUESTION 12
Which type of server is required to communicate with a third-party DLP solution?

• A. an ICAP-capable proxy server
• B. a PKI certificate server
• C. an HTTP server
• D. an HTTPS server

Answer: A

NEW QUESTION 13
The Web Cache Communication Protocol (WCCP) is a content-routing protocol that can facilitate the redirection of traffic flows in real time. Your organization has deployed WCCP to redirect web traffic that traverses their Cisco Adaptive Security Appliances (ASAs) to their Cisco Web Security Appliances (WSAs).
The simulator will provide access to the graphical user interfaces of one Cisco ASA and one Cisco WSA that are participating in a WCCP service. Not all aspects of the GUIs are implemented in the simulator. The options that have been implemented are sufficient to determine the best answer to each of the questions that are presented.
Your task is to examine the details available in the simulated graphical user interfaces and select the best answer.




How many Cisco ASAs and how many Cisco WSAs are participating in the WCCP service?

• A. One Cisco ASA or two Cisco ASAs configured as an Active/Standby failover pair, and one Cisco WSA.
• B. One Cisco ASA or two Cisco ASAs configured as an Active/Active failover pair, and one Cisco WSA.
• C. One Cisco ASA or two Cisco ASAs configured as an Active/Standby failover pair, and two Cisco WSAs.
• D. One Cisco ASA or two Cisco ASAs configured as an Active/Active failover pair, and two Cisco WSAs.
• E. Two Cisco ASAs and one Cisco WSA.
• F. Two Cisco ASAs and two Cisco WSAs.

Answer: A

Explanation: We can see from the output that the number of routers (ASA’s) is 1, so there is a single ASA or an active/ standby pair being used, and 1 Cache Engine. If the ASA’s were in a active/active role it would show up as 2 routers.

NEW QUESTION 14
Which two variable types can be defined within Snort rules? (Choose two.)

• A. srcvar
• B. portvar
• C. dstvar
• D. ipvar
• E. netvar

Answer: BD

NEW QUESTION 15
Which is the default IP address and admin port setting for https in the Cisco Web Security Appliance?

• A. http://192.168.42.42:8080
• B. http://192.168.42.42:80
• C. https://192.168.42.42:443
• D. https://192.168.42.42:8443

Answer: D

NEW QUESTION 16
Which two commands are used to verify that CWS redirection is working on a Cisco ASA appliance? (Choose two.)

• A. show scansafe statistics
• B. show webvpn statistics
• C. show service-policy inspect scansafe
• D. show running-config scansafe
• E. show running-config webvpn
• F. show url-server statistics

Answer: AC