最新的Cisco 300-207免費考試真題

問題1

Which description of an advantage of utilizing IPS virtual sensors is true?

A. The virtual sensor does not require 802.1q headers for inbound traffic.

B. Asymmetric traffic can be split between multiple virtual sensors

C. The persistent store is unlimited for the IPS virtual sensor.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題2

Which two commands are valid URL filtering commands? (Choose two.)

A. url-server (DMZ) vendor url-filter host 10.0.1.1

B. url-server (DMZ) vendor CISCO host 10.0.1.1

C. url-server (DMZ) vendor web host 10.0.1.1

D. url-server (DMZ) vendor n2h2 host 10.0.1.1

E. url-server (DMZ) vendor smartfilter host 10.0.1.1

正確答案: D,E

問題3

Which signature definition is virtual sensor 0 assigned to use?

A. vs0

B. ad1

C. sig0

D. ad0

E. sigl

F. rules0

正確答案: C

說明：（僅 Fast2test 成員可見）

問題4

Which Cisco ASA configuration command drops traffic if the Cisco ASA CX module fails?

A. no fail-open

B. fail-close

C. fail-close auth-proxy

D. auth-proxy

正確答案: B

問題5

Using the Cisco WSA GUI, where should an operator navigate to determine the running software image on the Cisco
WSA?

A. Admin > System Info

B. Systems Administration > System Upgrade

C. Systems Administration > General

D. Systems Administration > Feature Keys

正確答案: B

問題6

Which Cisco IPS CLI command shows the most fired signature?

A. show alert

B. show event alert

C. show version

D. show statistics virtual-sensor

正確答案: D

問題7

Which interface on the Cisco Email Security Appliance has HTTP and SSH enabled by default?

A. all interfaces

B. data 1

C. data 2

D. management 1

正確答案: B

問題8

Which two commands are used to verify that CWS redirection is working on a Cisco ASA appliance? (Choose two.)

A. show scansafe statistics

B. show running-config webvpn

C. show url-server statistics

D. show service-policy inspect scansafe

E. show webvpn statistics

F. show running-config scansafe

正確答案: A,D

問題9

What is the maximum number of recipients per hour that the Cisco Email Security Appliance will accept from the
green. public domain?

A. 25

B. 5000

C. Unlimited

D. 1

E. 20

F. 0

G. 50

正確答案: E

問題10

Which two benefits are provided by the dynamic dashboard in Cisco ASDM Version 5.2? (Choose two.)

A. It forwards traffic to destination devices.

B. It replaces syslog, RADIUS, and TACACS+ servers.

C. It provides statistics for device health.

D. It configures system polices for NAC devices.

E. It automatically detects Cisco security appliances to configure.

正確答案: C,E

問題11

What is the maximum message size that the Cisco Email Security Appliance will accept from the violet.public domain?

A. 100 MB

B. Unlimited

C. 1 MB

D. 10 MB

E. 100 KB

F. 1 KB

正確答案: D

說明：（僅 Fast2test 成員可見）

問題12

Which two practices are recommended for implementing NIPS at enterprise Internet edges? (Choose two.)

A. Integrate sensors primarily on the more trusted side of the firewall (inside or DMZ interfaces).

B. Use NIPS only for small implementations.

C. Implement redundant IPS and make data paths asymmetrical.

D. Integrate sensors primarily on the less trusted side of the firewall (outside interfaces).

E. Implement redundant IPS and make data paths symmetrical.

正確答案: A,E

問題13

Which statement about the Cisco ASA CX role in inspecting SSL traffic is true?

A. The traffic is encrypted, so the Cisco ASA CX cannot determine the content of the traffic.

B. If the administrator elects to decrypt traffic, the Cisco ASA CX acts as a man-in-me-middle.

C. To decrypt traffic, the Cisco ASA CX must accept the websites' certificates as Trusted Root Cas.

D. Either all traffic is decrypted, or no traffic is decrypted by the Cisco ASA CX.

正確答案: B

最新的Cisco Implementing Cisco Threat Control Solutions (SITCS) - 300-207免費考試真題

聯系我們

站內鏈接

最新更新