300-207 無料問題集「Cisco Implementing Cisco Threat Control Solutions (SITCS)」

（A）Configure Cisco ASA connection limits

（B）Configure Cisco IPS signature and monitor signature alerts

（C）Configure and Monitor Cisco CX Application Visibility and Control, web filtering, access and decryption policies

（D）Configure TCP state bypass in Cisco ASA and IOS

（E）Cisco Cloud Security on Cisco ASA

（A）Update the MX records to point to the inbound listener interfaces on the ESA.

（B）Update the MX records to point to the outbound listener interfaces on the ESA.

（C）Different Listeners must be used to handle inbound and outbound mail handling.

（D）Existing MX records should be maintained and policy routing should be used to redirect traffic to the ES

（E）The ESA can be connected to a DMZ external to the Email Server but it maintains only a single routing table.

（F）The ESA should be connected to the same subnet as the Email Server because it maintains only a single routing
table.

（G）Mail Listeners by default can share the same IP interface by defining the routes for sending and receiving.

（H）The ESA can be connected to a DMZ external to the Email Server because it maintains multiple routing tables.

（A）the CLI grep command

（B）the trace tool

（C）centralized or local message tracking

（D）the message tracker interface

（E）the CLI findevent command

（A）Web Security Manager HTTPS Proxy click Enable

（B）System Administration HTTPS Proxy click Enable

（C）HTTPS Proxy is enabled by default

（D）Security Services HTTPS Proxy click Enable

（A）Either all traffic is decrypted, or no traffic is decrypted by the Cisco ASA CX.

（B）To decrypt traffic, the Cisco ASA CX must accept the websites' certificates as Trusted Root Cas.

（C）The traffic is encrypted, so the Cisco ASA CX cannot determine the content of the traffic.

（D）If the administrator elects to decrypt traffic, the Cisco ASA CX acts as a man-in-me-middle.

（A）SPAN

（B）packet capture

（C）the Wireshark utility

（D）VACL capture

（A）response signatures

（B）default signatures

（C）designated signatures

（D）custom signatures

（E）tuned signatures

（F）preloaded signatures

（A）Configuring the SSH version with the ip ssh version 2 command.

（B）Enabling AAA for authentication, authorization, and accounting with the aaa new-model command.

（C）Enabling SSH transport with the transport input ssh command.

（D）Generating RSA key pairs with the crypto key generate rsa command.

（E）Configuring a domain name with the ip domain-name [name] command.

（A）AES

（B）RSA

（C）DES

（A）Promiscuous Mode, Close Traffic

（B）Inline Mode, Permit Traffic

（C）Inline Mode, Close Traffic

（D）Promiscuous Mode, Permit Traffic

（A）filterconfig

（B）messagefilters

（C）filters new

（D）policyconfig-- inbound or outbound-- filters

（A）This is a custom signature.

（B）This signature has triggered as indicated by the red severity icon.

（C）Produce Alert is the only action defined.

（D）The severity level is High.

（E）This signature is enabled, but inactive, as indicated bythe/0 to that follows the signature number.

（A）infrastructure ACLs

（B）VLAN ACLs

（C）port-by-port router ACLs

（D）transmit ACLs

（A）Public Certificate Authority Server Certificate

（B）Microsoft CA Subordinate Root Certificate

（C）LDAP CA Server Certificate

（D）LDAP CA Root Certificate

（E）Self Signed Server Certificate

（F）Public Certificate Authority Root Certificate

（G）Microsoft CA Server Certificate

（H）Self Signed Root Certificate

（A）Cisco Professional Services

（B）the administrator

（C）the security policy

（D）the signature author

（A）Cisco ASA 5500 series appliances

（B）WSA

（C）Internet Edge Firewall / IPS

（D）Cisco ASA CX Context-Aware Security

（A）Public Certificates can be used for HTTPS Decryption policies.

（B）The Packet capture feature is available for either permitted or dropped packets by default.

（C）When adding a standard LDAP realm, the group attribute will be UniqueMember.

（D）The Packet capture features is available for permitted packets by default.

（E）Public Certificates cannot be used for HTTPS Decryption policies.

（A）One Cisco ASA or two Cisco ASAs configured as an Active/Standby failover pair, and one Cisco WS

（B）Two Cisco ASAs and two Cisco WSAs.

（C）One Cisco ASA or two Cisco ASAs configured as an Active/Standby failover pair, and two Cisco WSAs.

（D）One Cisco ASA or two Cisco ASAs configured as an Active/Active failover pair, and two Cisco WSAs.

（E）Two Cisco ASAs and one Cisco WSA.

（F）One Cisco ASA or two Cisco ASAs configured as an Active/Active failover pair, and one Cisco WSA.