300-207試験無料問題集（245題）「Cisco Implementing Cisco Threat Control Solutions (SITCS) 認定」

出題：1

What is the default antispam policy for positively identified messages within the Cisco Email Security Appliance?

A. Deliver and Append with [SPAM]

B. Deliver and Prepend with [SPAM]

C. Deliver and Alternate Mailbox

D. Drop

正解：B 解答を投票する

出題：2

Which option is a benefit of Cisco hybrid email security?

A. advanced malware protection

B. on-premises control of outbound data

C. email encryption

D. message tracking

正解：B 解答を投票する

出題：3

An IPS is configured to fail-closed and you observe that all packets are dropped. What is a possible reason for this
behavior?

A. The IPS span session failed.

B. The global correlation update failed.

C. Mainapp is unresponsive.

D. The attack drop file is misconfigured.

正解：C 解答を投票する

出題：4

What is the access-list command on a Cisco IPS appliance used for?

A. to restrict management access to the sensor

B. to filter for traffic when the Cisco IPS appliance is in the inline mode

C. to create a filter that can be applied on the interface that is under attack

D. to permanently filter traffic coming to the Cisco IPS appliance via the sensing port

正解：A 解答を投票する

出題：5

Which two pieces of information are required to implement transparent user identification using context Directory
Agent? (Choose two.)

A. the server name of the global catalog domaint controller

B. the shared secret

C. the server name where Context Directory Agent is installed

D. the syslog server IP address

正解：B,C 解答を投票する

出題：6

What are the two policy types that can use a web reputation profile to perform reputation-based processing? (Choose
two.)

A. profile policies

B. access policies

C. decryption policies

D. encryption policies

正解：B,C 解答を投票する

出題：7

Which statement about Cisco IPS Manager Express is true?

A. It provides basic device management for large-scale deployments.

B. It provides a GUI for configuring IPS sensors and security modules.

C. It provides greater security than simple ACLs.

D. It enables communication with Cisco ASA devices that have no administrative access.

正解：B 解答を投票する

出題：8

Which information does the show scansafe statistics command provide?

A. AV statistics

B. PRSM events

C. Cisco CWS activity

D. ESA message tracking

正解：C 解答を投票する

出題：9

DRAG DROP
Drag and drop the Cisco Security IntelliShield Alert Manager Service components on the left onto the corresponding
description on the right.

正解：

出題：10

SIMULATION

正解：

Review the explanation part for full solution.
Explanation:
We need to define the parameter map, specifying port 8080 for http and https and define the servers and the license:
Branch-ISR#config t
Branch-ISR(config)# parameter-map type content-scan global
Branch-ISR(config-profile)#server scansafe primary name proxy-a.scansafe.net port http 8080 https 8080
Branch-ISR(config-profile)#server scansafe secondary name proxy-b.scansafe.net port http 8080 https 8080
Branch-ISR(config-profile)#license 0 0123456789abcdef
If the CWS proxy servers are not available, we traffic should be denied. This is done by the following configuration:
Branch-ISR(config-profile)#server scansafe on-failure block-all
Now we need to apply this to the fastethernet 0/1 interface outbound:
Branch-ISR(config)#interface Fastethernet 0/1
Branch-ISR(config-if)#content-scan outbound
Branch-ISR(config-if)#exit
Branch-ISR(config)#exit
Finally, we can verify out configuration by using the "show content-scan summary command:
Branch-ISR#show content-scan summary
Primary: 72.37.244.203(Up)*
Secondary: 70.39.231.99 (Up)
Interfaces: Fastethernet0/1

出題：11

Which two options are features of the Cisco Email Security Appliance? (Choose two.)

A. Cisco Registered Envelope Service

B. Cisco Anti-Replay Services

C. Cisco IronPort SenderBase Network

D. Cisco Destination Routing

正解：A,C 解答を投票する

出題：12

What step is required to enable HTTPS Proxy on the Cisco Web Security Appliance?

A. System Administration HTTPS Proxy click Enable

B. HTTPS Proxy is enabled by default

C. Security Services HTTPS Proxy click Enable

D. Web Security Manager HTTPS Proxy click Enable

正解：C 解答を投票する

出題：13

Which option describes what occurs with asymmetric routing when an IPS normalization engine is enable?

A. It must see a valid ACK/ACK before it lets a flow pass.

B. It allows the return packets back to the source path.

C. It must see a valid SYN/ACK before it lets a flow pass, otherwise the IPS normalization engine assumes that it is in
encountering an evasion attack and drops the return packets.

D. It must see a valued SYN/ACK before it lets a flow pass, otherwise the IPS normalization engine assumes that is is
encountering a fragmentation attack, and it drops the return packets

正解：C 解答を投票する

出題：14

What is the default IP range of the external zone?

A. 0.0.0.0 0.0.0.0

B. 0.0.0.0/8

C. 0.0.0.0 - 255.255.255.255

D. The network of the management interface

正解：C 解答を投票する

300-207試験無料問題集「Cisco Implementing Cisco Threat Control Solutions (SITCS) 認定」