300-207 Exam Questions - Online Test

300-207 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Ucertify offers free demo for 300-207 exam. "Implementing Cisco Threat Control Solutions (SITCS)", also known as 300-207 exam, is a Cisco Certification. This set of posts, Passing the Cisco 300-207 exam, will help you answer those questions. The 300-207 Questions & Answers covers all the knowledge points of the real exam. 100% real Cisco 300-207 exams and revised by experts!

Q11. What three alert notification options are available in Cisco IntelliShield Alert Manager? (Choose three.) 

A. Alert Summary as Text 

B. Complete Alert as an HTML Attachment 

C. Complete Alert as HTML 

D. Complete Alert as RSS 

E. Alert Summary as Plain Text 

F. Alert Summary as MMS 

Answer: A,B,C 

Q12. The Web Cache Communication Protocol (WCCP) is a content-routing protocol that can facilitate the redirection of traffic flows in real time. Your organization has deployed WCCP to redirect web traffic that traverses their Cisco Adaptive Security Appliances (ASAs) to their Cisco Web Security Appliances (WSAs). 

The simulator will provide access to the graphical user interfaces of one Cisco ASA and one Cisco WSA that are participating in a WCCP service. Not all aspects of the GUIs are implemented in the simulator. The options that have been implemented are sufficient to determine the best answer to each of the questions that are presented. 

Your task is to examine the details available in the simulated graphical user interfaces and select the best answer. 

Which of the following is true with respect to the version of WCCP configured on the Cisco ASA and the Cisco WSA? 

A. Both are configured for WCCP v1. 

B. Both are configured for WCCP v2. 

C. Both are configured for WCCP v3. 

D. There is a WCCP version mismatch between the Cisco WSA and the Cisco ASA. 

Answer: B 

Explanation: 

ASA version shows as version 2.0: 

\\psf\Home\Desktop\Screen Shot 2015-01-27 at 9.45.57 AM.png 

WSA also shows version 2 is being used: 

\\psf\Home\.Trash\Screen Shot 2015-01-27 at 9.47.53 AM.png 

Q13. Which two statements about Cisco Cloud Web Security functionality are true? (Choose two.) 

A. It integrates with Cisco Integrated Service Routers. 

B. It supports threat avoidance and threat remediation. 

C. It extends web security to the desktop, laptop, and PDA. 

D. It integrates with Cisco.ASA Firewalls. 

Answer: A,D 

Q14. To what extent will the Cisco IPS sensor contribute data to the Cisco SensorBase network? 

A. It will not contribute to the SensorBase network. 

B. It will contribute to the SensorBase network, but will withhold some sensitive information 

C. It will contribute the victim IP address and port to the SensorBase network. 

D. It will not contribute to Risk Rating adjustments that use information from the SensorBase network. 

Answer: B 

Explanation: 

To configure network participation, follow these steps:.Step 1.Log in to IDM using an account with administrator privileges..Step 2.Choose Configuration > Policies > Global Correlation > Network Participation..Step 3.To turn on network participation, click the Partial or Full radio button:..Partial—Data is contributed to the SensorBase Network, but data considered potentially sensitive is filtered out and never sent...Full—All data is contributed to the SensorBase Network 

In this case, we can see that this has been turned off as shown below: 

Q15. In order to set up HTTPS decryption on the Cisco Web Security Appliance, which two steps must be performed? (Choose two.) 

A. Enable and accept the EULA under Security Services > HTTPS Proxy. 

B. Upload a publicly signed server certificate. 

C. Configure or upload a certificate authority certificate. 

D. Enable HTTPS decryption in Web Security Manager > Access Policies. 

Answer: A,C 

Q16. Which two commands are valid URL filtering commands? (Choose two.) 

A. url-server (DMZ) vendor smartfilter host 10.0.1.1 

B. url-server (DMZ) vendor url-filter host 10.0.1.1 

C. url-server (DMZ) vendor n2h2 host 10.0.1.1 

D. url-server (DMZ) vendor CISCO host 10.0.1.1 

E. url-server (DMZ) vendor web host 10.0.1.1 

Answer: A,C 

Q17. Which Cisco technology is a customizable web-based alerting service designed to report threats and vulnerabilities? 

A. Cisco Security Intelligence Operations 

B. Cisco Security IntelliShield Alert Manager Service 

C. Cisco Security Optimization Service 

D. Cisco Software Application Support Service 

Answer: B 

Q18. Which IPS engine detects ARP spoofing? 

A. Atomic ARP Engine 

B. Service Generic Engine 

C. ARP Inspection Engine 

D. AIC Engine 

Answer: A 

Q19. What is the default CX Management 0/0 IP address on a Cisco ASA 5512-X appliance? 

A. 192.168.1.1 

B. 192.168.1.2 

C. 192.168.1.3 

D. 192.168.1.4 

E. 192.168.1.5 

F. 192.168.8.8 

Answer: F 

Q20. Which three options are characteristics of router-based IPS? (Choose three.) 

A. It is used for large networks. 

B. It is used for small networks. 

C. It supports virtual sensors. 

D. It supports multiple VRFs. 

E. It uses configurable anomaly detection. 

F. Signature definition files have been deprecated. 

Answer: B,D,F