Highest Quality of 300-207 simulations materials and answers for Cisco certification for IT learners, Real Success Guaranteed with Updated 300-207 pdf dumps vce Materials. 100% PASS Implementing Cisco Threat Control Solutions (SITCS) exam Today!

Q81. Which two conditions must you configure in an event action override to implement a risk rating of 70 or higher and terminate the connection on the IPS? (Choose two.) 

A. Configure the event action override to send a TCP reset. 

B. Set the risk rating range to 70 to 100. 

C. Configure the event action override to send a block-connection request. 

D. Set the risk rating range to 0 to 100. 

E. Configure the event action override to send a block-host request. 

Answer: A,B 


Q82. Which Cisco IPS deployment mode is best suited for bridged interfaces? 

A. inline interface pair mode 

B. inline VLAN pair mode 

C. inline VLAN group mode 

D. inline pair mode 

Answer: B 


Q83. An ASA with an IPS module must be configured to drop traffic matching IPS signatures and block all traffic if the module fails. Which describes the correct configuration? 

A. Inline Mode, Permit Traffic 

B. Inline Mode, Close Traffic 

C. Promiscuous Mode, Permit Traffic 

D. Promiscuous Mode, Close Traffic 

Answer: B 


Q84. Refer to the exhibit. 

The system administrator of mydomain.com received complaints that some messages that were sent from sender user@somedomain.com were delayed. Message tracking data on the sender shows that an email sample that was received was clean and properly delivered. What is the likely cause of the intermittent delays? 

A. The remote MTA has a.SenderBase Reputation Score of -1.0. 

B. The remote MTA is sending emails from RFC 1918 IP addresses. 

C. The remote MTA has activated the SUSPECTLIST sender group. 

D. The remote MTA has activated the default inbound mail policy. 

Answer: C 


Q85. Which two options are features of the Cisco Email Security Appliance? (Choose two.) 

A. Cisco Anti-Replay Services 

B. Cisco Destination Routing 

C. Cisco Registered Envelope Service 

D. Cisco IronPort SenderBase Network 

Answer: C,D 


Q86. A system administrator wants to know if the email traffic from a remote partner will activate special treatment message filters that are created just for them. Which tool on the Cisco Email Security gateway can you use to debug or emulate the flow that a message takes through the work queue? 

A. the message tracker interface 

B. centralized or local message tracking 

C. the CLI.findevent command 

D. the trace tool 

E. the CLI.grep command 

Answer: D 


Q87. You ran the ssh generate-key command on the Cisco IPS and now administrators are unable to connect. Which action can be taken to correct the problem? 

A. Replace the old key with a new key on the client. 

B. Run the ssh host-key command. 

C. Add the administrator IP addresses to the trusted TLS host list on the IPS. 

D. Run the ssh authorized-keys command. 

Answer: A 


Q88. Which five system management protocols are supported by the Cisco Intrusion Prevention System? (Choose five.) 

A. SNMPv2c 

B. SNMPv1 

C. SNMPv2 

D. SNMPv3 

E. Syslog 

F. SDEE 

G. SMTP 

Answer: A,B,C,F,G 


Q89. Which three functions can Cisco Application Visibility and Control perform within Cisco Cloud Web Security? (Choose three.) 

A. validation of malicious traffic 

B. traffic control 

C. extending Web Security to all computing devices 

D. application-level classification 

E. monitoring 

F. signature tuning 

Answer: B,D,E 


Q90. Which Cisco technology is a modular security service that combines a stateful inspection firewall with next-generation application awareness, providing near real-time threat protection? 

A. Cisco ASA 5500 series appliances 

B. Cisco ASA CX Context-Aware Security 

C. WSA 

D. Internet Edge Firewall / IPS 

Answer: B