[Free] Download New Latest (September 2016) Cisco 300-207 Actual Test 151-160

Ensurepass

QUESTION 151

Which two statements about Cisco ESA clusters are true? (Choose two.)

 

A.

A cluster must contain exactly one group.

B.

A cluster can contain multiple groups.

C.

Clusters are implemented in a client/server relationship.

D.

The cluster configuration must be managed by the cluster administrator.

E.

The cluster configuration can be created and managed through either the GUI or the CLI.

 

Correct Answer: BE

 

 

QUESTION 152

Which two statements about devices within a Cisco ESA cluster are true? (Choose two.)

 

A.

Clustered systems must consist of devices in the same hardware series.

B.

Clustered devices can communicate via either SSH or Cluster Communication Service.

C.

Clustered devices can communicate only with Cluster Communication Service.

D.

In-the-cloud devices must be in a separate cluster from on-premise devices.

E.

Clustered devices can run different versions of AsyncOS.

 

Correct Answer: AB

 

 

QUESTION 153

What is a primary difference between the web security features of the Cisco WSA and the Cisco ASA NGFW?

 

A.

Cisco WSA provides URL filtering, while Cisco ASA NGFW does not.

B.

Cisco ASA NGFW provides caching services, while Cisco WSA does not.

C.

Cisco WSA provides web reputation filtering, while Cisco ASA NGFW does not.

D.

Cisco ASA NGFW provides application visibility and control on all ports, while Cisco WSA does not.

 

Correct Answer: D

 

 

QUESTION 154

Which Cisco ASA configuration command drops traffic if the Cisco ASA CX module fails?

 

A.

no fail-open

B.

fail-close

C.

fail-close auth-proxy

D.

auth-proxy

 

Correct Answer: B

 

 

QUESTION 155

Which Cisco Cloud Web Security Connector feature allows access by all of an organization’s users while applying Active Directory group policies?

 

A.

a company authentication key

B.

a group authentication key

C.

a PAC file

D.

proxy forwarding

E.

a user authentication key

 

Correct Answer: A

 

 

QUESTION 156

Which Cisco ESA component receives connections from external mail servers?

 

A.

MTA

B.

public listener

C.

private listener

D.

recipient access table

E.

SMTP incoming relay agent

 

Correct Answer: B

 

 

 

 

 

 

QUESTION 157

What is the function of the Cisco Context Adaptive Scanning Engine in Cisco Hybrid Email Security services?

 

A.

It uses real-time traffic threat assessment to identify suspicious email senders and messages.

B.

It provides a preventive defense against viruses by scanning messages before they enter the network.

C.

It analyzes message content and attachments to protect an organization’s intellectual property.

D.

It protects against blended threats by using human-like l
ogic to review and evaluate traffic.

 

Correct Answer: D

 

 

QUESTION 158

The Web Cache Communication Protocol (WCCP) is a content-routing protocol that can facilitate the redirection of traffic flows in real time. Your organization has deployed WCCP to redirect web traffic that traverses their Cisco Adaptive Security Appliances (ASAs) to their Cisco Web Security Appliances (WSAs).

 

The simulator will provide access to the graphical user interfaces of one Cisco ASA and one Cisco WSA that are participating in a WCCP service. Not all aspects of the GUIs are implemented in the simulator. The options that have been implemented are sufficient to determine the best answer to each of the questions that are presented.

 

Your task is to examine the details available in the simulated graphical user interfaces and select the best answer.

 

clip_image002

clip_image004

clip_image006

clip_image008

 

How many Cisco ASAs and how many Cisco WSAs are participating in the WCCP service?

 

A.

One Cisco ASA or two Cisco ASAs configured as an Active/Standby failover pair, and one Cisco WSA.

B.

One Cisco ASA or two Cisco ASAs configured as an Active/Active failover pair, and one Cisco WSA.

C.

One Cisco ASA or two Cisco ASAs configured as an Active/Standby failover pair, and two Cisco WSAs.

D.

One Cisco ASA or two Cisco ASAs configured as an Active/Active failover pair, and two Cisco WSAs.

E.

Two Cisco ASAs and one Cisco WSA.

F.

Two Cisco ASAs and two Cisco WSAs.

 

Correct Answer: A

Explanation:

We can see from the output that the number of routers (ASA’s) is 1, so there is a single ASA or an active/ standby pair being used, and 1 Cache Engine. If the ASA’s were in a active/active role it would show up as 2 routers.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

QUESTION 159

The Web Cache Communication Protocol (WCCP) is a content-routing protocol that can facilitate the redirection of traffic flows in real time. Your organization has deployed WCCP to redirect web traffic that traverses their Cisco Adaptive Security Appliances (ASAs) to their Cisco Web Security Appliances (WSAs).

 

The simulator will provide access to the graphical user interfaces of one Cisco ASA and one Cisco WSA that are participating in a WCCP service. Not all aspects of the GUIs are implemented in the simulator. The options that have been implemented are sufficient to determine the best answer to each of the questions that are presented.

 

Your task is to examine the details available in the simulated graphical user interfaces and select the best answer.

 

clip_image010

clip_image012

clip_image014

clip_image016

 

What traffic is not redirected by WCCP?

 

A.

Traffic destined to public address space

B.

Traffic sent from public address space

C.

Traffic destined to private address space

D.

Traffic sent from private address space

 

Correct Answer: B

Explanation:

From the screen shot below we see the WCCP-Redirection ACL is applied, so all traffic from the Private IP space to any destination will be redirected.

 

clip_image018

 

 

QUESTION 160

The Web Cache Communication Protocol (WCCP) is a content-routing protocol that can facilitate the redirection of traffic flows in real time. Your organization has deployed WCCP to redirect web traffic that traverses their Cisco Adaptive Security Appliances (ASAs) to their Cisco Web Security Appliances (WSAs).

 

The simulator will provide access to the graphical user interfaces of one Cisco ASA and one Cisco WSA that are participating in a WCCP service. Not all aspects of the GUIs are implemented in the simulator. The options that have been implemented are sufficient to determine the best answer to each of the questions that are presented.

 

Your task is to examine the details available in the simulated graphical user interfaces and select the best answer.

 

clip_image020

clip_image022

clip_image024

clip_image026

 

Between the Cisco ASA configuration and the Cisco WSA configuration, what is true with respect to redirected ports?

 

A.

Both are configured for port 80 only.

B.

Both are configured for port 443 only.

C.

Both are configured for both port 80 and 443.

D.

Both are configured for ports 80, 443 and 3128.

E.

There is a configuration mismatch on redirected ports.

 

Correct Answer: C

Explanation:

This can be seen from the WSA Network tab shown below:

 

clip_image028

 

Free VCE & PDF File for Cisco 300-207 Real Exam

Instant Access to Free VCE Files: CCNA | CCNP | CCIE …
Instant Access to Free PDF Files: CCNA | CCNP | CCIE …

Tags: