Regenerate Cisco 300-207 exam question

Q1. Which Cisco technology is a modular security service that combines a stateful inspection firewall with next-generation application awareness, providing near real-time threat protection? 

A. Cisco ASA 5500 series appliances 

B. Cisco ASA CX Context-Aware Security 

C. WSA 

D. Internet Edge Firewall / IPS 

View Answer

Q2. Which command sets the number of packets to log on a Cisco IPS sensor? 

A. ip-log-count number 

B. ip-log-packets number 

C. ip-log-bytes number 

D. ip-log number 

View Answer

Q3. When you configure the Cisco ESA to perform blacklisting, what are two items you can disable to enhance performance? (Choose two.) 

A. spam scanning 

B. antivirus scanning 

C. APT detection 

D. rootkit detection 

View Answer

Q4. During initial configuration, the Cisco ASA can be configured to drop all traffic if the ASA CX SSP fails by using which command in a policy-map? 

A. cxsc fail 

B. cxsc fail-close 

C. cxsc fail-open 

D. cxssp fail-close 

View Answer

Q5. What command alters the SSL ciphers used by the Cisco Email Security Appliance for TLS 

sessions and HTTPS access? 

A. sslconfig 

B. sslciphers 

C. tlsconifg 

D. certconfig 

View Answer

Q6. Which three statements about Cisco ASA CX are true? (Choose three.) 

A. It groups multiple ASAs as a single logical device. 

B. It can perform context-aware inspection. 

C. It provides high-density security services with high availability. 

D. It uses policy-based interface controls to inspect and forward TCP- and UDP-based packets. 

E. It can make context-aware decisions. 

F. It uses four cooperative architectural constructs to build the firewall. 

View Answer

Q7. Which IPS feature allows you to aggregate multiple IPS links over a single port channel? 

A. UDLD 

B. ECLB 

C. LACP 

D. PAgP 

View Answer

Q8. Which two options are features of the Cisco Email Security Appliance? (Choose two.) 

A. Cisco Anti-Replay Services 

B. Cisco Destination Routing 

C. Cisco Registered Envelope Service 

D. Cisco IronPort SenderBase Network 

View Answer

Q9. What is a primary difference between the web security features of the Cisco WSA and the Cisco ASA NGFW? 

A. Cisco WSA provides URL filtering, while Cisco ASA NGFW does not. 

B. Cisco ASA NGFW provides caching services, while Cisco WSA does not. 

C. Cisco WSA provides web reputation filtering, while Cisco ASA NGFW does not. 

D. Cisco ASA NGFW provides application visibility and control on all ports, while Cisco WSA does not. 

View Answer

Q10. The Web Cache Communication Protocol (WCCP) is a content-routing protocol that can facilitate the redirection of traffic flows in real time. Your organization has deployed WCCP to redirect web traffic that traverses their Cisco Adaptive Security Appliances (ASAs) to their Cisco Web Security Appliances (WSAs). 

The simulator will provide access to the graphical user interfaces of one Cisco ASA and one Cisco WSA that are participating in a WCCP service. Not all aspects of the GUIs are implemented in the simulator. The options that have been implemented are sufficient to determine the best answer to each of the questions that are presented. 

Your task is to examine the details available in the simulated graphical user interfaces and select the best answer. 

What traffic is not redirected by WCCP? 

A. Traffic destined to public address space 

B. Traffic sent from public address space 

C. Traffic destined to private address space 

D. Traffic sent from private address space 

View Answer