Implementing Cisco Threat Control Solutions (300-210) Free Practice Test

Question 1

Which two connectors can be used to redirect traffic to Cisco CWS for web security functions? (Choose two)

A. Cisco Firepower

B. Cisco FireAmp

C. ISR G2

D. ESA

E. ASA

Correct Answer: C,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit.

Which tool do you use to verify whether a primary server established a connection to Cisco CWS on a Cisco ASA?

A. ping

B. tcp ping

C. Telnet

D. traceroute

Correct Answer: B

Question 3

Which function is the primary function of Cisco AMP Threat Grid?

A. applying a real-time URI blacklist

B. automated malware analysis

C. automated email encryption

D. monitoring network traffic

Correct Answer: B

Question 4

With Cisco AMP for Endpoints on Windows, which three engines are available in the connector? (Choose three)

A. Talos

B. ClamAV

C. Tetra

D. Spero

E. Annos

F. Ethos

Correct Answer: C,D,F

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Heartbeats are used to maintain the high-availability status of an application. Which factor is most important?

A. Round-trip time

B. Latency

C. Bandwidth

D. Routing

Correct Answer: B

Question 6

Which Cisco Web Security Appliance deployment mode requires minimal change to endpoint devices?

A. Promiscuous Mode

B. Inline Mode

C. Explicit Forward Mode

D. Transparent Mode

Correct Answer: D

Question 7

Which option is available when configuring a file rule action on a Cisco ASA FirePOWER module?

A. Malware Cloud Lookup

B. Delete Files

C. Clean Files

D. Allow Files

Correct Answer: A

Question 8

Which two statements about Cisco DLP are true? (Choose two)

A. It encrypts email messages automatically by default

B. The DLP license is included with the standard Cisco IronPort ESA license

C. It can protect confidential data at rest and in transit

D. It includes predefined policy temples to support compliance with HIPAA PCI-DSS and other regulations

E. It is most effective when deployed on individual endpoints to protect against data leaving the network over email or file transfer

F. The network deployment protects data in the data center and on individual workstations

Correct Answer: D,E

Question 9

Which description of the inline mode on a Cisco ASA FirePOWER module is true?

A. You can evaluate the content of the traffic without affecting the network

B. The policy of the module bypasses the ACL rules

C. The ASA sends traffic by using any interface

D. The policy of the module affects the traffic flow

Correct Answer: D

Question 10

A customter is concerned with their employee's Internet usage and has asked for more web traffic control.
Which two features of the Cisco Web Security Appliance help with this issue? (Choose two)

A. DHCP Spoofing Protection

B. Application Visibility and Control

C. Dynamic ARP Inspection

D. Network Address Translation

E. Advanced Malware Protection

Correct Answer: B,E

Question 11

On Cisco Firepower Management Center, which policy is used to collect health modules alerts from managed devices?

A. correlation policy

B. access control policy

C. health awareness policy

D. health policy

E. system policy

Correct Answer: D

Question 12

What is a purpose of the network analysis policy on a Cisco Firepower NGIPS?

A. it specifies the outer-header criteria used to process traffic without using advanced inspection

B. it defines the rules for encrypting traffic

C. it examines packets for attacks by using intrusion rules

D. it governs how traffic is preprocessed before inspection

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 13

An engineer must evaluate the security gaps with their current WSA. What additional protection does AMP offer for WSA?

A. point in time detection

B. roaming-user protection

C. restricted bandwidth

D. data loss prevention

Correct Answer: A

Question 14

Which ESA deployment mode is most appropriate for an environment in which data must reside on site and management prefers the lowest-cost solution?

A. cloud

B. physical

C. virtual

D. hybrid

Correct Answer: D

Welcome to TestSimulate

Cisco Implementing Cisco Threat Control Solutions (300-210) Free Practice Test