300-207 Exam Questions - Online Test

300-207 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Our pass rate is high to 98.9% and the similarity percentage between our 300-207 study guide and real exam is 90% based on our seven-year educating experience. Do you want achievements in the Cisco 300-207 exam in just one try? I am currently studying for the Cisco 300-207 exam. Latest Cisco 300-207 Test exam practice questions and answers, Try Cisco 300-207 Brain Dumps First.

Q31. Which three zones are used for anomaly detection in a Cisco IPS? (Choose three.) 

A. internal zone 

B. external zone 

C. illegal zone 

D. inside zone 

E. outside zone 

F. DMZ zone 

Answer: A,B,C 

Q32. Which three statements about Cisco CWS are true? (Choose three.) 

A. It provides protection against zero-day threats. 

B. Cisco SIO provides it with threat updates in near real time. 

C. It supports granular application policies. 

D. Its Roaming User Protection feature protects the VPN from malware and data breaches. 

E. It supports local content caching. 

F. Its Cognitive Threat Analytics feature uses cloud-based analysis and detection to block threats outside the network. 

Answer: A,B,C 

Q33. Which is the default IP address and admin port setting for https in the Cisco Web Security Appliance? 

A. http://192.168.42.42:8080 

B. http://192.168.42.42:80 

C. https://192.168.42.42:443 

D. https://192.168.42.42:8443 

Answer: D 

Q34. At which value do custom signatures begin? 

A. 1024 

B. 10000 

C. 1 

D. 60000 

Answer: D 

Q35. Which Cisco ESA predefined sender group uses parameter-matching to reject senders? 

A. BLACKLIST 

B. WHITELIST 

C. SUSPECTLIST 

D. UNKNOWNLIST 

Answer: A 

Q36. Which Cisco technology provides spam filtering and email protection? 

A. IPS 

B. ESA 

C. WSA 

D. CX 

Answer: B 

Q37. Which antispam technology assumes that email from server A, which has a history of distributing spam, is more likely to be spam than email from server B, which does not have a history of distributing spam? 

A. Reputation-based filtering 

B. Context-based filtering 

C. Cisco ESA multilayer approach 

D. Policy-based filtering 

Answer: A 

Q38. Which version of AsyncOS for web is required to deploy the Web Security Appliance as a CWS connector? 

A. AsyncOS version 7.7.x 

B. AsyncOS version 7.5.x 

C. AsyncOS version 7.5.7 

D. AsyncOS version 7.5.0 

Answer: C 

Q39. A Cisco Email Security Appliance uses which message filter to drop all executable attachments entering and leaving the Cisco Email Security Appliance? 

A. drop-exE. if (attachment-filename == "\\.exe$") OR (attachment-filetype == "exe") { drop(); } 

B. drop-exE. if (recv-listener == "InboundMail" ) AND ( (attachment-filename == "\\.exe$") OR (attachment-filetype == "exe")) { drop(); } 

C. drop-exe! if (attachment-filename == "\\.exe$") OR (attachment-filetype == "exe") { drop(); } 

D. drop-exe! if (recv-listener == "InboundMail" ) AND ( (attachment-filename == "\\.exe$") OR (attachment-filetype == "exe")) { drop(); } 

Answer: A 

Q40. When learning accept mode is set to auto, and the action is set to rotate, when is the KB created and used? 

A. It is created every 24 hours and used for 24 hours. 

B. It is created every 24 hours, but the current KB is used. 

C. It is created every 1 hour and used for 24 hours. 

D. A KB is created only in manual mode. 

Answer: A