최신 300-207 무료덤프 - Cisco Implementing Cisco Threat Control Solutions (SITCS)

문제1

When does the Cisco ASA send traffic to the Cisco ASA IPS module for analysis?

A. after outgoing VPN traffic is encrypted

B. before incoming VPN traffic is decrypted.

C. after firewall policies are applied

정답: C

문제2

Refer to the following:
R01(config)#ip wccp web-cache redirect-list 80 password-local

A. Traffic using TCP port 80 is redirected to the Cisco WSA

B. The default "cisco" password is configured on the Cisco WSA

C. Traffic permitted in access-list 80 is redirected to the Cisco WSA

D. Traffic denied in prefix-list 80 is redirected to the Cisco WSA

정답: C

문제3

Which Cisco ESA component receives connections from external mail servers?

A. MTA

B. private listener

C. recipient access table

D. SMTP incoming relay agent

E. public listener

정답: E

문제4

Which two benefits are provided by the dynamic dashboard in Cisco ASDM Version 5.2? (Choose two.)

A. It provides statistics for device health.

B. It configures system polices for NAC devices.

C. It forwards traffic to destination devices.

D. It automatically detects Cisco security appliances to configure.

E. It replaces syslog, RADIUS, and TACACS+ servers.

정답: A,D

문제5

Using the Cisco WSA GUI, where should an operator navigate to determine the running software image on the Cisco
WSA?

A. Systems Administration > Feature Keys

B. Admin > System Info

C. Systems Administration > System Upgrade

D. Systems Administration > General

정답: C

문제6

DRAG DROP
Drag and drop the steps on the left into the correct order of initial Cisco IOS IPS configuration on the right.

정답:

문제7

Who or what calculates the signature fidelity rating?

A. the administrator

B. the signature author

C. Cisco Professional Services

D. the security policy

정답: B

문제8

Which two configuration steps are required for implementing SSH for management access to a
Cisco router? (Choose two.)

A. Enabling SSH transport with the transport input ssh command.

B. Enabling AAA for authentication, authorization, and accounting with the aaa new-model command.

C. Configuring a domain name with the ip domain-name [name] command.

D. Generating RSA key pairs with the crypto key generate rsa command.

E. Configuring the SSH version with the ip ssh version 2 command.

정답: A,C

설명: (DumpTOP 회원만 볼 수 있음)

문제9

Which command verifies that the correct CWS license key information was entered on the Cisco ASA?

A. sh run scansafe server

B. sh run server scansafe

C. sh run server

D. sh run scansafe

정답: D

문제10

Joe was asked to secure access to the Cisco Web Security Appliance to prevent unauthorized access. Which four steps
should Joe implement to accomplish this goal? (Choose four.)

A. Enable HTTPS access via the GUI/CLI with redirection from HTTP.

B. Put the Cisco WSA Management interface on a private management VLAN.

C. Implement IP access lists to limit access to the management IP address in the Cisco Web Security Appliance GUI.

D. Add the Cisco Web Security Appliance IP address to the local access list.

E. Replace the Cisco self-signed certificate with a publicly signed certificate.

F. Change the netmask on the Cisco WSA Management interface to a 32-bit mask.

G. Create an MX record for the Cisco Web Security Appliance in DNS.

정답: A,B,C,E

문제11

A user is deploying a Cisco IPS appliance in a data center to mitigate most attacks, including atomic attacks. Which
two modes does Cisco recommend using to configure for this? (Choose two.)

A. transparent mode

B. interface pair

C. EtherChannel load balancing

D. VLAN pair

E. promiscuous mode

정답: C,D

문제12

What Event Action in an IPS signature is used to stop an attacker from communicating with a network using an access-
list?

A. Request Block Host

B. Deny Attacker Inline

C. Deny Connection Inline

D. Request Block Connection

E. Deny Packet Inline

정답: A

최신 300-207 무료덤프 - Cisco Implementing Cisco Threat Control Solutions (SITCS)

우리와 연락하기

유용한 링크

최신 업데이트