SITCS 300-207 Practice Test

Question 1 / 55 - Mode : Exam
Which statements about the Cisco ASA (CX) NGFW management interface are true? (Choose three) A. Through the box traffic is allowed on 5500-X ASA Management 0/0 Interface B. The management interface needs Internet access to receive updates from Cisco SIO C. It shares the Cisco ASA Management 0/0 interface D. The no nameif command is used to remove a configured name on an interface What is a function of the Web AVC engine? A. Searches for malicious code in traffic B. It encrypts data is decrypted C. Enables firewalls on applications D. Controls application behavior What can capture traffic based on various OSI Layer 3 and Layer 4 criteria? A. SPAN B. VACL C. RSPAN D. FSPAN Which is not an area that the Cisco IPS would typically be located within a typical modularized network? A. Campus access B. Internet edge C. Data center D. Branch offices Which configuration action is accurate? A. Scanning proxies cannot be added B. Scanning proxies can be removed C. Scanning Proxy list can be edited D. Only one listening port can be used Which is a feature of the Explicit Proxy Mode? A. Client directs traffic to web server B. Does not require network infrastructure C. Requires no client configuration D. Client resolves web server hostname Which statements about the Cisco Application Visibility Control are true? (Choose three) A. It sets a maximum number of allowed applications B. Applications can be detected by signatures C. It can be used to control application activity on a network D. It enables deeper controls for particular application types Which is not a feature of configuring identities to group client transactions? A. Identities can only be used one time B. Utilises Subnets and Protocols C. Used to determine the policy group D. Does not require user authentication Which statements about Cisco Adaptive Security Appliances (ASA) are true? (Choose two) A. The 5500-X NG is supported in ASA software release 8.0 and later B. IPS-SSP and CS-SSP can be run at the same time on the same 5585-X appliance C. 5545-X and 5555-X support RAID 1 D. 5512, 5515, and 5525 support 120 GB SSD Identify the statements that accurately apply to NGFW URL objects. (Choose two) A. They can identify traffic based on URLs B. They are part of the HTTP request header C. They can use wildcard characters for matching D. They are used to identify LDAP users Identify the statements that accurately apply to NGFW secure mobility objects. (Choose two) A. Only one system predefined secure mobility object exists B. They are used to identify LDAP users C. The Device Type field is based on the operating system of the end user device D. They are part of the HTTP request header Which information is not sent to the SensorBase? A. Attacker IP address and port B. Packet content C. Signature ID D. Traffic header information What is a characteristic of the Cisco WSA explicit proxy mode? A. Network infrastructure redirects client requests to proxy server B. Client resolves hostname of target web server C. Client directs traffic to proxy server D. No client configuration is required Which three statements about the Cisco AVC engine are true? (Choose three) A. It can restrict access to adult content on some content-sharing sites. B. Applications can be detected by signatures downloaded from Cisco Security Intelligence Operations. C. It uses the CASE engine to detect and inspect web applications that use HTTPS. D. A full understanding of the design of each application is required to control application activity. E. It can limit bandwidth consumed by some application types to control congestion. Which HTTP proxy decryption setting would be used if the administrator wanted users to be notified why a URL request was blocked? A. Decrypt for Application Detection B. Decrypt for End-User Acknowledgement C. Decrypt for End-User Notification D. Decrypt for Authentication Which two main areas of web usage controls are used by Cisco WSA? (Choose two) A. FlexAuth B. Port security C. URL filters D. RBAC E. Cisco Application Visibility and Control Which is not a Web filtering rule? A. Why B. What C. When D. Who Which is a function of the RAT? A. Specifies list of local domains B. Defines control rules C. Defines remote hosts D. Determine sender's reputation What functionality does Cisco ESA provide? A. It is used to detect typical malicious or suspicious network activity using signatures B. It is used to filter unsolicited and malicious e-mail C. It is used to control user access based on the Web server category of a particular HTTP or HTTPS request D. It is used to control the amount of bandwidth used for particular application types Which ESA deployment option uses a firewall DMZ for inbound traffic? A. Virtual deployment B. On premises as email gateway C. On-switch deployment D. Hybrid deployment Under which tab are the Active Directory Agent Settings located? A. Administration B. Policies C. Device D. Events Which is not a feature of the Cisco WSA authentication? A. Can track employees internet usage B. Track and report users by location C. Enforces different policies for groups D. Integrates with existing security tools What technology is Cisco ASA (CX) NGFW Broad and Web AVC based on? A. QoS B. CBQoS C. NBAR D. DCAR Which is not the right configuration for connecting WCCP to ASA? A. Enable the WCCP service group B. Create access-list with client servers C. Identify the service to be redirected D. Create traffic redirection access-list Which statement best describes Cisco ASA (CX) NGFW access policies? A. Eventing is off by default B. Capture Packets is off by default C. Eventing creates traffic test objects D. Capture file uses ID tag as filename Which is a feature of the Active authentication? A. Uses Cisco ASA proxy mechanism B. Uses Cisco Context Directory Agent C. Requires Active Directory domain D. Utilizes the Active Directory agent Select the object types available when configuring policies. (Choose four) A. Network B. Protocol C. Network group D. ASA CX network E. Identity Identify the actions available when configuring decryption policies. (Choose three) A. Monitor B. Drop connection C. Pass through without decryption D. Decrypt What options are available on the policy object screen in PRSM? (Choose four) A. Reserve B. Filter C. Edit D. Delete E. Create Which feature best describes Cisco's Adaptive Security Application Context Aware Next Generation Firewall? A. Can control application behavior B. Does not monitor databases C. Only enables or disables applications D. Recognizes applications on few ports Which of these is a feature of Cloud Web Security Connector mode? A. Includes Access Policies B. All Cisco WSA features available C. Directs traffic to the CWS tower D. Includes Layer 4 traffic monitor Which threat profile could a network administrator deploy to minimize time with securing web technologies? A. Edge B. Web Applications C. Data Center D. SCADA Which is not a part of the SMTP conversation? A. Body B. Footer C. Header D. Envelope Which sensing interface mode has traffic flow through one interface pair where the traffic is isolated from other interfaces? A. Inline VLAN groups B. Promiscuous mode interface C. Inline VLAN pairs D. Inline interface pair What does the Test domain join link verify? A. Active Directory can join the realm B. NG can join Active Directory domain C. User has administrative privilege D. Confirms the IP address to join What column is used to create a new custom URL policy in the WSA? A. Group B. Objects C. URL Filtering D. Applications Which is not a decryption policy action? A. Decrypt everything B. Decrypt safe traffic C. Decrypt potentially malicious traffic D. Do not decrypt Which statements accurately apply to the HTTPS proxy operation? (Choose two) A. HTTPS proxy certificates cannot be preloaded B. HTTP Proxy is enabled by default C. Policies can be defined to determine if HTTPS connections can proceed without examination D. WSA can act as an SSL proxy Which feature is required when deploying load balancing for multiple IPS sensors? A. VACL Capture B. IPS Signature C. ECLB D. Threat profile What is the default TVR numeric value assigned to all assets? A. 100 B. 75 C. 150 D. 50 Which is a benefit of the inline VLAN group mode? A. Few preventative actions B. Selective in VLAN inspection C. Does not normalizes traffic D. Requires less configuration Which SMTP feature delivers messages on behalf of users? A. MTA B. DNS A record C. Groupware Server D. DNS Mail exchanger (MX) record Which are steps in configuring the Cisco ASA using ASDM to integrate with the Cisco CWS? A. Create a new traffic class B. Set up to three servers C. Set Whitelists for restrictions D. Nest a 3-4 policy under a 5-7 policy Which criteria is used by service objects to identify traffic? (Choose three) A. Port B. ICMP C. Mac address D. Protocol You need to configure Cisco CWS proxy server details on the Cisco ASA using the CLI. Refer to the options below. Which set of commands will correctly redirect traffic to the primary and backup proxy servers? A. Option D B. Option A C. Option C D. Option B What best describes the function of the trace tool? A. Trace the configuration steps B. Follow the user activity C. Tests real transactions D. Test configured policies Which category contains policies used to control access to third party software providers? A. Web policies B. Authentication policies C. Data Transfer policies D. Custom Policy Elements Which is not a feature of the external directory agent? A. Gathers the user's login information B. Analyses external MAC address table C. Sends information to Cisco ASA NGFW D. Caches user-to-IP address mapping Which two MIME categories would be used to block the downloading of MP4 based files? (Choose two) A. multipart/mp4 B. video/mp4 C. application/mp4 D. audio/mp4 Which is not a features of the WSA architecture? A. Contains management and reporting tools B. Has Cisco Anti-Malware built in C. Includes term-based licenses D. Components are activated by licenses Which is not a signature feature required for Cisco IPS tuning? A. Based on Attack Severity Rating B. Relationship to important processes C. Based on relevance to environment D. The correlation between signatures Which is not an Outbreak Intelligence Scanlet technique? A. Virtualized Script Emulation B. Structural Content Investigation C. Deep Content Analysis D. Malware Inspection Agent What range of web reputation scores would be associated with a site that is suspected of malicious content, but has not been confirmed? A. -3 to 3 B. -6 to -3 C. -10 to -6 D. 0 to 5 Which Cisco Security IntelliShield Alert Manager Service component collects and processes threat data? A. IntelliShield Alert Manager built-in workflow system B. IntelliShield Alert Manager back-end intelligence engine C. IntelliShield Threat Outbreak Alert D. IntelliShield Alert Manager vulnerability alerts E. IntelliShield Alert Manager Web portal F. IntelliShield Alert Manager historical database Which Cisco ESA software license provides the most cost effective way to include the Sophos Antivirus solution? A. Cisco Email Security Inbound Bundle B. Cisco Email Security Outbound Bundle C. Web Security Essentials license D. Cisco Email Security Premium Bundle

Our Recommended Premium CCNA Training Resources

These are the best CCNA training resources online:

Click Here to get the Cisco CCNA Gold Bootcamp, the most comprehensive and highest rated CCNA course online with a 4.8 star rating from over 30,000 public reviews. I recommend this as your primary study source to learn all the topics on the exam.

Want to take your practice tests to the next level? AlphaPrep’s purpose-built Cisco test engine has the largest question bank, adaptive questions, and advanced reporting which tells you exactly when you’re ready to pass the real exam. Click here for your free trial.

The SITCS 300-207 is for the Cisco Implementing Cisco Threat Control Solutions (SITCS) exam. You can use the practice test to check your knowledge and improve both your conceptual knowledge and hands-on skills in preparation for the Cisco CCNP SITCS Security 300-207 certification exam.

The Cisco SITCS 300-207 practice exams include questions to test your Cisco data center technology knowledge. The Cisco Security 300-207 exam objectives include Cisco content security such as Cisco ASA, WSA, ESA, and cloud web security, threat defense, devices GUIs and secured CLI, troubleshooting, monitoring and reporting tools, threat defense architectures, and content security architectures.

The Cisco SITCS 300-207 is a Cisco CCNP security certification. Passing the certification exam proves your knowledge and skills related to Cisco threat control solutions. This is the only self-study resource and complete study package you’ll need for your test preparation routine and to increase exam success.

SITCS 300-207 Practice Test

Complete this form to get your score report

Our Recommended Premium CCNA Training Resources