Download Cisco.PracticeDumps.300-210.2018-06-04.3e.210q.vcex

To enable the Cisco ASA Host Scan with remediation capabilities, an administrator must have which two Cisco ASA licenses enabled on its security appliance? (Choose two.)

• A: Cisco AnyConnect Premium license
• B: Cisco AnyConnect Essentials license
• C: Cisco AnyConnect Mobile license
• D: Host Scan license
• E: Advanced Endpoint Assessment license
• F: Cisco Security Agent license

Correct Answer: AE

After adding a remote-access IPsec tunnel via the VPN wizard, an administrator needs to tune the IPsec policy parameters. 
Where is the correct place to tune the IPsec policy parameters in Cisco ASDM?

• A: IPsec user profile
• B: Crypto Map
• C: Group Policy
• D: IPsec policy
• E: IKE policy

Correct Answer: D

Who or what calculates the signature fidelity rating?

• A: the signature author
• B: Cisco Professional Services
• C: the administrator
• D: the security policy

Correct Answer: A

Which three zones are used for anomaly detection? (Choose three.)

• A: Internal zone
• B: External zone
• C: Illegal zone
• D: Inside zone
• E: Outside zone
• F: DMZ zone

Correct Answer: ABC

What is the default IP range of the external zone?

• A: 0.0.0.0 0.0.0.0
• B: 0.0.0.0 - 255.255.255.255
• C: 0.0.0.0/8
• D: The network of the management interface

Correct Answer: B

When learning accept mode is set to auto, and the action is set to rotate, when is the KB created and used?

• A: It is created every 24 hours and used for 24 hours.
• B: It is created every 24 hours, but the current KB is used.
• C: It is created every 1 hour and used for 24 hours.
• D: A KB is created only in manual mode.

Correct Answer: A

What is the CLI command to create a new Message Filter in a Cisco Email Security Appliance?

• A: filterconfig
• B: filters new
• C: messagefilters
• D: policyconfig-- inbound or outbound-- filters

Correct Answer: B

A Cisco Email Security Appliance uses which message filter to drop all executable attachments entering and leaving the Cisco Email Security Appliance?

• A: drop-exe: if (attachment-filename == "\\.exe$") OR (attachment-filetype == "exe") { drop(); }
• B: drop-exe: if (recv-listener == "InboundMail" ) AND ( (attachment-filename == "\\.exe$") OR (attachment-filetype == "exe")) { drop(); }
• C: drop-exe! if (attachment-filename == "\\.exe$") OR (attachment-filetype == "exe") { drop(); }
• D: drop-exe! if (recv-listener == "InboundMail" ) AND ( (attachment-filename == "\\.exe$") OR (attachment-filetype == "exe")) { drop(); }

Correct Answer: A

What can Cisco Prime Security Manager (PRSM) be used to achieve?

• A: Configure and Monitor Cisco CX Application Visibility and Control, web filtering, access and decryption policies
• B: Configure Cisco ASA connection limits
• C: Configure TCP state bypass in Cisco ASA and IOS
• D: Configure Cisco IPS signature and monitor signature alerts
• E: Cisco Cloud Security on Cisco ASA

Correct Answer: A

Which is the default IP address and admin port setting for https in the Cisco Web Security Appliance?

• A: http://192.168.42.42:8080
• B: http://192.168.42.42:80
• C: https://192.168.42.42:443
• D: https://192.168.42.42:8443

Correct Answer: D