Get real exam questions for 300-207 Implementing Cisco Threat Control Solutions (SITCS). 100% Free.
Q1. What are two features of the Cisco ASA NGFW? (Choose two.) A. It can restrict access based on qualitative analysis. B. It can restrict access based on reputation. C. It can reactively protect against Internet threats. D. It can proactively protect against Internet threats. View AnswerAnswer: B,D Q2. The Web Security Appliance has identities defined for faculty and staff, students, and
Q1. You ran the ssh generate-key command on the Cisco IPS and now administrators are unable to connect. Which action can be taken to correct the problem? A. Replace the old key with a new key on the client. B. Run the ssh host-key command. C. Add the administrator IP addresses to the trusted TLS host list on the IPS. D. Run the ssh authorized-keys command. View AnswerAnswer: A Q2. Which c
Q1. What three alert notification options are available in Cisco IntelliShield Alert Manager? (Choose three.) A. Alert Summary as Text B. Complete Alert as an HTML Attachment C. Complete Alert as HTML D. Complete Alert as RSS E. Alert Summary as Plain Text F. Alert Summary as MMS View AnswerAnswer: A,B,C Q2. Refer to the exhibit. The system administrator of mydomain.com received compla
Q1. Which port is used for CLI Secure shell access? A. Port 23 B. Port 25 C. Port 22 D. Port 443 View AnswerAnswer: C Q2. Which three statements about threat ratings are true? (Choose three.) A. A threat rating is equivalent to a risk rating that has been lowered by an alert rating. B. The largest threat rating from all actioned events is added to the risk rating. C. The smallest threa
Q1. Which three search parameters are supported by the Email Security Monitor? (Choose three.) A. Destination domain B. Network owner C. MAC address D. Policy requirements E. Internal sender IP address F. Originating domain View AnswerAnswer: A,B,E Q2. CCORRECT TEXT View AnswerAnswer: Steps are in Explanation below: Q3. Which two options are features of the Cisco Email Security Appl
Q1. Within Cisco IPS anomaly detection, what is the default IP range of the external zone? A. 0.0.0.0 0.0.0.0 B. 0.0.0.0 - 255.255.255.255 C. 0.0.0.0/8 D. the network of the management interface View AnswerAnswer: B Q2. Which Cisco monitoring solution displays information and important statistics for the security devices in a network? A. Cisco Prime LAN Management B. Cisco ASDM Version
Q1. How does a user access a Cisco Web Security Appliance for initial setup? A. Connect the console cable and use the terminal at 9600 baud to run the setup wizard. B. Connect the console cable and use the terminal at 115200 baud to run the setup wizard. C. Open the web browser at 192.168.42.42:8443 for the setup wizard over https. D. Open the web browser at 192.168.42.42:443 for the setup wi
Q1. Which Cisco WSA is intended for deployment in organizations of more than 6000 users? A. WSA S370 B. WSA S670 C. WSA S370-2RU D. WSA S170 View AnswerAnswer: B Q2. To what extent will the Cisco IPS sensor contribute data to the Cisco SensorBase network? A. It will not contribute to the SensorBase network. B. It will contribute to the SensorBase network, but will withhold some sensitiv
Q1. Which three functions can Cisco Application Visibility and Control perform within Cisco Cloud Web Security? (Choose three.) A. validation of malicious traffic B. traffic control C. extending Web Security to all computing devices D. application-level classification E. monitoring F. signature tuning View AnswerAnswer: B,D,E Q2. What is the default IP range of the external zone? A. 0.
Q1. Which three zones are used for anomaly detection in a Cisco IPS? (Choose three.) A. internal zone B. external zone C. illegal zone D. inside zone E. outside zone F. DMZ zone View AnswerAnswer: A,B,C Q2. Which three zones are used for anomaly detection? (Choose three.) A. Internal zone B. External zone C. Illegal zone D. Inside zone E. Outside zone F. DMZ zone View AnswerAnswe
Q1. If inline-TCP-evasion-protection-mode on a Cisco IPS is set to asymmetric mode, what is a side effect? A. Packet flow is normal. B. TCP requests are throttled. C. Embryonic connections are ignored. D. Evasion may become possible. View AnswerAnswer: D Q2. When you configure the Cisco ESA to perform blacklisting, what are two items you can disable to enhance performance? (Choose two.)Â
Q1. Cisco’s ASA CX includes which two URL categories? (Choose two.) A. Proxy Avoidance B. Dropbox C. Hate Speech D. Facebook E. Social Networking F. Instant Messaging and Video Messaging View AnswerAnswer: C,E Q2. What is the authentication method for an encryption envelope that is set to medium security? A. The recipient must always enter a password, even if credentials are cached.Â
Q1. What command alters the SSL ciphers used by the Cisco Email Security Appliance for TLS sessions and HTTPS access? A. sslconfig B. sslciphers C. tlsconifg D. certconfig View AnswerAnswer: A Q2. What are two features of the Cisco ASA NGFW? (Choose two.) A. It can restrict access based on qualitative analysis. B. It can restrict access based on reputation. C. It can reactively protec
Q1. During initial configuration, the Cisco ASA can be configured to drop all traffic if the ASA CX SSP fails by using which command in a policy-map? A. cxsc fail B. cxsc fail-close C. cxsc fail-open D. cxssp fail-close View AnswerAnswer: B Q2. Which two statements about Cisco Cloud Web Security functionality are true? (Choose two.) A. It integrates with Cisco Integrated Service Routers.
Q1. What is a primary difference between the web security features of the Cisco WSA and the Cisco ASA NGFW? A. Cisco WSA provides URL filtering, while Cisco ASA NGFW does not. B. Cisco ASA NGFW provides caching services, while Cisco WSA does not. C. Cisco WSA provides web reputation filtering, while Cisco ASA NGFW does not. D. Cisco ASA NGFW provides application visibility and control on all
Q1. Within Cisco IPS anomaly detection, what is the default IP range of the external zone? A. 0.0.0.0 0.0.0.0 B. 0.0.0.0 - 255.255.255.255 C. 0.0.0.0/8 D. the network of the management interface View AnswerAnswer: B Q2. A system administrator wants to know if the email traffic from a remote partner will activate special treatment message filters that are created just for them. Which tool
Q1. What is the default CX Management 0/0 IP address on a Cisco ASA 5512-X appliance? A. 192.168.1.1 B. 192.168.1.2 C. 192.168.1.3 D. 192.168.1.4 E. 192.168.1.5 F. 192.168.8.8 View AnswerAnswer: F Q2. Which Cisco technology provides spam filtering and email protection? A. IPS B. ESA C. WSA D. CX View AnswerAnswer: B Q3. Which Cisco technology prevents targeted malware attacks, p
Q1. Which IPS engine detects ARP spoofing? A. Atomic ARP Engine B. Service Generic Engine C. ARP Inspection Engine D. AIC Engine View AnswerAnswer: A Q2. Which three statements about Cisco CWS are true? (Choose three.) A. It provides protection against zero-day threats. B. Cisco SIO provides it with threat updates in near real time. C. It supports granular application policies. D. Its