최신 300-207 무료덤프 - Cisco Implementing Cisco Threat Control Solutions (SITCS)

문제1

What is a primary difference between the web security features of the Cisco WSA and the Cisco ASA NGFW?

A. Cisco ASA NGFW provides application visibility and control on all ports, while Cisco WSA does not.

B. Cisco ASA NGFW provides caching services, while Cisco WSA does not.

C. Cisco WSA provides URL filtering, while Cisco ASA NGFW does not.

D. Cisco WSA provides web reputation filtering, while Cisco ASA NGFW does not.

정답: A

문제2

Which Cisco Cloud Web Security Connector feature allows access by all of an organization's users while applying
Active Directory group policies?

A. a group authentication key

B. a company authentication key

C. a PAC file

D. proxy forwarding

E. a user authentication key

정답: B

문제3

Which role does Passive Identity Management play in the Cisco Cloud Web Security architecture?

A. It provides user-level information that is received from Active Directory.

B. It enables the administrator to control web access for users and user groups.

C. It defines a standard for exchanging authentication and authorization data.

D. It controls content that passes into and out of the network.

정답: A

문제4

Which information does the show scansafe statistics command provide?

A. PRSM events

B. Cisco CWS activity

C. AV statistics

D. ESA message tracking

정답: B

문제5

What action will the sensor take regarding IP addresses listed as known bad hosts in the Cisco SensorBase network?

A. Global correlation is configured in Aggressive mode, which has a very aggressive effect on deny actions.

B. Global correlation is configured in Audit mode fortesting the feature without actually denying any hosts.

C. Reputation filtering is disabled.

D. It will not adjust risk rating values based on the known bad hosts list.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제6

Which option describes how the native VLAN is set up on an IPS sensor when VLAN groups are used in an inline
deployment of the sensor?

A. The sensor looks at the native VLAN setup on the switch to determine the correct native VLAN to use.

B. There is no way to set this, so you need to tag all traffic.

C. A default VLAN variable must be associated with each physical interface on the sensor.

D. The sensor does not care about VLANs.

E. ISL links are only supported.

정답: C

문제7

Which four methods are used to deploy transparent mode traffic redirection? (Choose four.)

A. policy-based routing

B. Microsoft GPO

C. PAC files

D. Web Cache Communication Protocol

E. manual browser configuration

F. DHCP server

G. Layer 4 switch

H. Layer 7 switch

정답: A,D,G,H

문제8

How does a user access a Cisco Web Security Appliance for initial setup?

A. Connect the console cable and use the terminal at 9600 baud to run the setup wizard.

B. Connect the console cable and use the terminal at 115200 baud to run the setup wizard.

C. Open the web browser at 192.168.42.42:443 for the setup wizard over https.

D. Open the web browser at 192.168.42.42:8443 for the setup wizard over https.

정답: D

문제9

For which task can PRSM be used?

A. To configure Cisco ESA

B. To monitor Cisco intelliShield

C. To configure Cisco ASA CX firewalls

D. To monitor CWS traffic

정답: C

문제10

Which Cisco WSA is intended for deployment in organizations of more than 6000 users?

A. WSA S170

B. WSA S670

C. WSA S370

D. WSA S370-2RU

정답: B

문제11

Which settings are required when deploying Cisco IPS in high-availability mode using
EtherChannel load balancy?

A. ECLB IPS appliances must be in on-a-stick mode, ECLB IPS solution does not maintain state ifa sensor goes down,
and TCP flow is forced through a different IPS appliance.

B. ECLB IPS appliances must not be in on-a-stick mode, ECLB IPS solution maintains state if asensor goes down, and
TCP flow is forced through the same IPS appliance flow

C. ECLB IPS appliances must not be in on-a-stick mode, ECLB IPS solution does not maintainstate if a sensor goes
down, and TCP flow is forced through a different IPS appliance.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제12

Which action cloud reduce the security of the management interface of the Cisco ESA appliance?

A. configure a web UI session timeout of 30 minutes for connected users.

B. Display a login banner indicating that all appliance use is logged and reviewed

C. create a network access list to allow all connections to the management interface

정답: C

문제13

An IPS is configured to fail-closed and you observe that all packets are dropped. What is a possible reason for this
behavior?

A. The attack drop file is misconfigured.

B. The global correlation update failed.

C. The IPS span session failed.

D. Mainapp is unresponsive.

정답: D

문제14

What command alters the SSL ciphers used by the Cisco Email Security Appliance for TLS sessions and HTTPS access?

A. sslciphers

B. certconfig

C. tlsconifg

D. sslconfig

정답: D

문제15

Who or what calculates the signature fidelity rating?

A. the administrator

B. the signature author

C. Cisco Professional Services

D. the security policy

정답: B

문제16

Which Cisco ESA predefined sender group uses parameter-matching to reject senders?

A. BLACKLIST

B. UNKNOWNLIST

C. WHITELIST

D. SUSPECTLIST

정답: A

문제17

Which IPS engine detects ARP spoofing?

A. AIC Engine

B. Service Generic Engine

C. Atomic ARP Engine

D. ARP Inspection Engine

정답: C

문제18

Which antispam technology assumes that email from server A, which has a history of distributing spam, is more likely
to be spam than email from server B, which does not have a history of distributing spam?

A. Reputation-based filtering

B. Context-based filtering

C. Policy-based filtering

D. Cisco ESA multilayer approach

정답: A

문제19

When learning accept mode is set to auto, and the action is set to rotate, when is the KB created and used?

A. It is created every 24 hours and used for 24 hours.

B. A KB is created only in manual mode.

C. It is created every 24 hours, but the current KB is used.

D. It is created every 1 hour and used for 24 hours.

정답: A

최신 300-207 무료덤프 - Cisco Implementing Cisco Threat Control Solutions (SITCS)

우리와 연락하기

유용한 링크

최신 업데이트