It is impossible to pass Cisco 300-210 exam without any help in the short term. Come to Examcollection soon and find the most advanced, correct and guaranteed Cisco 300-210 practice questions. You will get a surprising result by our Most up-to-date Implementing Cisco Threat Control Solutions (SITCS) practice guides.

2021 Mar 300-210 exam question

Q1. Which Cisco Web Security Appliance feature enables the appliance to block suspicious traffic on all of its ports and IP addresses?

A. explicit forward mode

B. Layer 4 Traffic Monitor

C. transparent mode

D. Secure Web Proxy

Answer: B


Q2.  What is the maximum message size that the Cisco Email Security Appliance will accept from the violet.public domain?

A. 1 KB

B. 100 KB

C. 1 MB

D. 10 MB

E. 100 MB

F. Unlimited

Answer: D


Q3. Which three sender reputation ranges identify the default behavior of the Cisco Email Security Appliance? (Choose three.)

A. If it is between -1 and +10, the email is accepted

B. If it is between +1 and +10, the email is accepted

C. If it is between -3 and -1, the email is accepted and additional emails from the sender are throttled

D. If it is between -3 and +1, the email is accepted and additional emails from the sender are throttled

E. If it is between -4 and +1, the email is accepted and additional emails from the sender are throttled

F. If it is between -10 and -3, the email is blocked

G. If it is between -10 and -3, the email is sent to the virus and spam engines for additional scanning

H. If it is between -10 and -4, the email is blocked

Answer: A C F


Q4. Which Cisco Firepower rule action displays a HTTP warning page and resets the connection of HTTP traffic specified in the access control rule ?

A. Interactive Block with Reset

B. Block

C. Allow with Warning

D. Interactive Block

Answer: D

Explanation

http://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa-firepower-module


Q5. In WSA , which two pieces of information are required to implement transparent user identification using Context Directory Agent? (Choose two.)

A. the server name where Context Directory Agent is installed

B. the server name of the global catalog domain controller

C. the backup Context Directory Agent

D. the shared secret

E. the syslog server IP address

Answer: A E


Improve 300-210 free practice questions:

Q6. When you configure the Cisco ESA to perform blacklisting, what are two items you can disable to enhance performance? (Choose two.)

A. rootkit detection

B. spam scanning

C. APT detection

D. antivirus scanning

E. URL filtering

Answer: B D


Q7. The Web Cache Communication Protocol (WCCP) is a content-routing protocol that can facilitate the redirection of traffic flows in real time. Your organization has deployed WCCP to redirect web traffic that traverses their Cisco Adaptive Security Appliances (ASAs) to their Cisco Web Security Appliances (WSAs).

The simulator will provide access to the graphical user interfaces of one Cisco ASA and one Cisco WSA that are participating in a WCCP service. Not all aspects of the GUIs are implemented in the simulator. The options that have been implemented are sufficient to determine the best answer to each of the questions that are presented.

Your task is to examine the details available in the simulated graphical user interfaces and select the best answer.

Between the Cisco ASA configuration and the Cisco WSA configuration, what is true with respect to redirected ports?

A. Both are configured for port 80 only.

B. Both are configured for port 443 only.

C. Both are configured for both port 80 and 443.

D. Both are configured for ports 80, 443 and 3128.

E. There is a configuration mismatch on redirected ports.

Answer: C

Explanation

This can be seen from the WSA Network tab shown below:


Q8. Which object can be used on a Cisco FirePOWER appliance, but not in an access control policy rule on Cisco FirePOWER services running on a Cisco ASA?

A. URL

B. security intelligence

C. VLAN

D. geolocation

Answer: C


Q9. In which two places can thresholding settings be configured? (Choose two.)

A. globally, per intrusion policy

B. globally, within the network analysis policy

C. on each access control rule

D. on each IPS rule

E. per preprocessor, within the network analysis policy

Answer: C D


Q10. Which type of policy is used to define the scope for applications that are running on hosts?

A. access control policy.

B. application awareness policy.

C. application detector policy.

D. network discovery policy.

Answer: C