Exam Code: 300-207 (Practice Exam Latest Test Questions VCE PDF)
Exam Name: Implementing Cisco Threat Control Solutions (SITCS)
Certification Provider: Cisco
Free Today! Guaranteed Training- Pass 300-207 Exam.

2021 Mar 300-207 free draindumps

Q71. An ASA with an IPS module must be configured to drop traffic matching IPS signatures and block all traffic if the module fails. Which describes the correct configuration? 

A. Inline Mode, Permit Traffic 

B. Inline Mode, Close Traffic 

C. Promiscuous Mode, Permit Traffic 

D. Promiscuous Mode, Close Traffic 

Answer: B 


Q72. Refer to the exhibit. 

What are two facts about the interface that you can determine from the given output? (Choose two.) 

A. A Cisco Flexible NetFlow monitor is attached to the interface. 

B. A quality of service policy is attached to the interface. 

C. Cisco Application Visibility and Control limits throughput on the interface. 

D. Feature activation array is active on the interface. 

Answer: A,B 


Q73. Which two benefits are provided by the dynamic dashboard in Cisco ASDM Version 5.2? (Choose two.) 

A. It configures system polices for NAC devices. 

B. It forwards traffic to destination devices. 

C. It provides statistics for device health. 

D. It replaces syslog, RADIUS, and TACACS+ servers. 

E. It automatically detects Cisco security appliances to configure. 

Answer: C,E 


Q74. When a Cisco Email Security Appliance joins a cluster, which four settings are inherited? (Choose four.) 

A. IP address 

B. DNS settings 

C. SMTP routes 

D. HAT 

E. RAT 

F. hostname 

G. certificates 

Answer: B,C,D,E 


Q75. When you create a new server profile on the Cisco ESA, which subcommand of the ldapconfig command configures spam quarantine end-user authentication? 

A. isqauth 

B. isqalias 

C. test 

D. server 

Answer: A 


Most recent 300-207 question:

Q76. What are the two policy types that can use a web reputation profile to perform reputation-based processing? (Choose two.) 

A. profile policies 

B. encryption policies 

C. decryption policies 

D. access policies 

Answer: C,D 


Q77. When you deploy a sensor to send connection termination requests, which additional traffic-monitoring function can you configure the sensor to perform? 

A. Monitor traffic as it flows to the sensor. 

B. Monitor traffic as it flows through the sensor. 

C. Monitor traffic from the Internet only. 

D. Monitor traffic from both the Internet and the intranet. 

Answer: B 


Q78. What are the initial actions that can be performed on an incoming SMTP session by the workqueue of a Cisco Email Security Appliance? 

A. Accept, Reject, Relay, TCPRefuse 

B. LDAP Verification, Envelope Sender Verification, Bounce Verification, Alias Table Verification 

C. Recipient Access Table Verification, Host DNS Verification, Masquerading, Spam Payload Check 

D. SMTP Authentication, SBRS Verification, Sendergroup matching, DNS host verification 

Answer: A 


Q79. What can Cisco Prime Security Manager (PRSM) be used to achieve? 

A. Configure and Monitor Cisco CX Application Visibility and Control, web filtering, access and decryption policies 

B. Configure Cisco ASA connection limits 

C. Configure TCP state bypass in Cisco ASA and IOS 

D. Configure Cisco IPS signature and monitor signature alerts 

E. Cisco Cloud Security on Cisco ASA 

Answer: A 


Q80. Which two statements about Cisco ESA clusters are true? (Choose two.) 

A. A cluster must contain exactly one group. 

B. A cluster can contain multiple groups. 

C. Clusters are implemented in a client/server relationship. 

D. The cluster configuration must be managed by the cluster administrator. 

E. The cluster configuration can be created and managed through either the GUI or the CLI. 

Answer: B,E