Cisco Practice Questions For 300-210

Question No. 1

Which IPS signature regular expression CLI command matches a host issuing a domain lookup for www.theblock.com?

• A. regex-string (x03[Tt][Hh][Ee]x05[Bb][Ll][Oo][Cc][Kk])
• B. regex-string (x0b[theblock.com])
• C. regex-string (x03[the]x05[block]0x3[com])
• D. regex-string (x03[T][H][E]x05[B][L][O][C][K]x03[.][C][O][M]

Question No. 2

Which two statements about a Cisco WSA configured in Transparent mode are true? (Choose two.)

• A. It can handle explicit HTTP requests.
• B. It requires a PAC file for the client web browser.
• C. It requires a proxy for the client web browser.
• D. WCCP v2-enabled devices can automatically redirect traffic destined to port 80.
• E. Layer 4 switches can automatically redirect traffic destined to port 80.

Question No. 3

An engineer is trying to configuring email encryption on Cisco ESA. Which technology could be used as a key server?

• A. Cisco Registered Envelop Service
• B. Local CA
• C. Cisco Talos Services
• D. Cisco ISE

Question No. 4

Which two tasks must you perform when you implement CWS on a Cisco ASA or ASAv? (Choose two.)

• A. Browse to whoami.scansafe.net to verify that web redirection is operating normally.
• B. Enable the ScanSafe feature.
• C. Create an authentication license key.
• D. Create a new RSA key.
• E. Define the primary and secondary CWS proxy.

Question No. 5

Which three protocols are required when considering firewall rules for email services using a Cisco Email Security Appliance? (Choose three.)

• A. SMTP
• B. HTTP
• C. DNS
• D. SNMP
• E. FTP

Question No. 6

What are two requirements for configuring a hybrid interface in FirePOWER? (Choose two)

• A. virtual network
• B. virtual router
• C. virtual appliance
• D. virtual switch
• E. virtual context

Question No. 7

An engineer must deploy email security to a large enterprise with multiple offices. Each office cannot support its own ESA appliance. What technology best supports email security across the organization?

• A. Cloud Email Security
• B. Hybrid Email Security
• C. Virtual Email Security Appliance
• D. Physical Email Security Appliance

Question No. 8

When you configure the Cisco ESA to perform blacklisting, what are two items you can disable to enhance performance? (Choose two.)

• A. spam scanning
• B. antivirus scanning
• C. APT detection
• D. rootkit detection

Question No. 9

Which three statements about threat ratings are true? (Choose three.)

• A. A threat rating is equivalent to a risk rating that has been lowered by an alert rating.
• B. The largest threat rating from all actioned events is added to the risk rating.
• C. The smallest threat rating from all actioned events is subtracted from the risk rating.
• D. The alert rating for deny-attacker-inline is 45.
• E. Unmitigated events do not cause a threat rating modification.
• F. The threat rating for deny-attacker-inline is 50.

Question No. 10

Which type of interface do you configure to receive traffic from a switch or tap, promiscuously, on a cisco firePOWER device?

• A. inline set
• B. transparent
• C. Routed
• D. Passive

Question No. 11

Which Cisco ESA predefined sender group uses parameter-matching to reject senders?

• A. WHITELIST
• B. BLACKLIST
• C. UNKNOWNLIST
• D. SUSPECTLIST

Question No. 12

The helpdesk was asked to provide a record of delivery for an important email message that a customer claims it did not receive. Which feature of the Cisco Email Security Appliance provides this record?

• A. Outgoing Mail Reports
• B. SMTP Routes
• C. Message Tracking
• D. Scheduled Reports
• E. System Administration