Implementing Cisco Threat Control Solutions (SITCS) (300-207) Free Practice Test

Question 1

Which statement about the Cisco ASA CX role in inspecting SSL traffic is true?

A. Either all traffic is decrypted, or no traffic is decrypted by the Cisco ASA CX.

B. If the administrator elects to decrypt traffic, the Cisco ASA CX acts as a man-in-me-middle.

C. The traffic is encrypted, so the Cisco ASA CX cannot determine the content of the traffic.

D. To decrypt traffic, the Cisco ASA CX must accept the websites' certificates as Trusted Root Cas.

Correct Answer: B

Question 2

When you create a new server profile on the Cisco ESA, which subcommand of the ldapconfig command configures
spam quarantine end-user authentication?

A. server

B. isqalias

C. test

D. isqauth

Correct Answer: D

Question 3

Which two pieces of information are required to implement transparent user identification using context Directory
Agent? (Choose two.)

A. the server name where Context Directory Agent is installed

B. the syslog server IP address

C. the shared secret

D. the server name of the global catalog domaint controller

Correct Answer: A,C

Question 4

The Web Cache Communication Protocol (WCCP) is a content-routing protocol that can facilitate the redirection of
traffic flows in real time. Your organization has deployed WCCP to redirect web traffic that traverses their Cisco
Adaptive Security Appliances (ASAs) to their Cisco Web Security Appliances (WSAs).
The simulator will provide access to the graphical user interfaces of one Cisco ASA and one Cisco WSA that are
participating in a WCCP service. Not all aspects of the GUIs are implemented in the simulator. The options that have
been implemented are sufficient to determine the best answer to each of the questions that are presented.
Your task is to examine the details available in the simulated graphical user interfaces and select the best answer.

How many Cisco ASAs and how many Cisco WSAs are participating in the WCCP service?

A. One Cisco ASA or two Cisco ASAs configured as an Active/Active failover pair, and one Cisco WSA.

B. One Cisco ASA or two Cisco ASAs configured as an Active/Standby failover pair, and one Cisco WS

C. Two Cisco ASAs and two Cisco WSAs.

D. One Cisco ASA or two Cisco ASAs configured as an Active/Active failover pair, and two Cisco WSAs.

E. Two Cisco ASAs and one Cisco WSA.

F. One Cisco ASA or two Cisco ASAs configured as an Active/Standby failover pair, and two Cisco WSAs.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

What three alert notification options are available in Cisco IntelliShield Alert Manager? (Choose three.)

A. Alert Summary as Text

B. Alert Summary as MMS

C. Alert Summary as Plain Text

D. Complete Alert as RSS

E. Complete Alert as an HTML Attachment

F. Complete Alert as HTML

Correct Answer: A,E,F

Question 6

Which IPS feature allows you to aggregate multiple IPS links over a single port channel?

A. ECLB

B. UDLD

C. PAgP

D. LACP

Correct Answer: A

Question 7

Which four methods are used to deploy transparent mode traffic redirection? (Choose four.)

A. Web Cache Communication Protocol

B. PAC files

C. Layer 7 switch

D. Microsoft GPO

E. manual browser configuration

F. DHCP server

G. policy-based routing

H. Layer 4 switch

Correct Answer: A,C,G,H

Question 8

What are three best practices for a Cisco Intrusion Prevention System? (Choose three.)

A. Group tuning of signatures

B. Automatically updating signature packs

C. Single tuning of signatures

D. Manually updating signature packs

E. Checking for new signatures on a staggered schedule

F. Checking for new signatures every 4 hours

Correct Answer: A,B,E

Question 9

Which solution must a customer deploy to prioritize traffic to a cloud-based contact management application while
still allowing employees access to the Internet for business and personal use?

A. Cisco Intrusion Prevention Services

B. Cisco Application Visibility and Control

C. Cisco NetFlow

D. policy-based routing

Correct Answer: B

Question 10

Which Option of SNMPv3 ensure authentication but no encryption?

A. no priv

B. authNoPriv

C. priv

D. no auth

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 11

Which method does Cisco recommend for collecting streams of data on a sensor that has been virtualized?

A. VACL capture

B. packet capture

C. the Wireshark utility

D. SPAN

Correct Answer: B

Question 12

Which statement about the default configuration of an IPS sensor's management security settings is true?

A. Telnet and SSH are enable

B. User accounts lock after three attempts

C. The web server port is TCP 80

Correct Answer: C

Question 13

What CLI command configures IP-based access to restrict GUI and CLI access to a Cisco Email Security appliance's
administrative interface?

A. adminaccessconfig

B. sshconfig

C. ipaccessconfig

D. sslconfig

Correct Answer: A

Question 14

Which commands are required to configure SSH on router? (Choose two.)

A. Configure a DHCP host for the router using dhcpname#configure terminal

B. Generate enterprise CA self-sign certificate

C. Configure domain name using ip domain-name command

D. Generate a key using crypto key generate rsa

Correct Answer: C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 15

Which Cisco WSA is intended for deployment in organizations of more than 6000 users?

A. WSA S170

B. WSA S670

C. WSA S370-2RU

D. WSA S370

Correct Answer: B

Welcome to TestSimulate

Cisco Implementing Cisco Threat Control Solutions (SITCS) (300-207) Free Practice Test