Act now and download your Cisco 300-207 test today! Do not waste time for the worthless Cisco 300-207 tutorials. Download Up to the immediate present Cisco Implementing Cisco Threat Control Solutions (SITCS) exam with real questions and answers and begin to learn Cisco 300-207 with a classic professional.

Q81. Which command is used to enable strong ciphers on the Cisco Web Security Appliance? 

A. interfaceconfig 

B. strictssl 

C. etherconfig 

D. adminaccessconfig 


Q82. Which Cisco ESA predefined sender group uses parameter-matching to reject senders? 






Q83. What are three best practices for a Cisco Intrusion Prevention System? (Choose three.) 

A. Checking for new signatures every 4 hours 

B. Checking for new signatures on a staggered schedule 

C. Automatically updating signature packs 

D. Manually updating signature packs 

E. Group tuning of signatures 

F. Single tuning of signatures 

Answer: B,C,E 

Q84. Which command disables SSH access for administrators on the Cisco ESA? 

A. interfaceconfig 

B. sshconfig 

C. sslconfig 

D. systemsetup 


Q85. To what extent will the Cisco IPS sensor contribute data to the Cisco SensorBase network? 

A. It will not contribute to the SensorBase network. 

B. It will contribute to the SensorBase network, but will withhold some sensitive information 

C. It will contribute the victim IP address and port to the SensorBase network. 

D. It will not contribute to Risk Rating adjustments that use information from the SensorBase network. 



To configure network participation, follow these steps:.Step 1.Log in to IDM using an account with administrator privileges..Step 2.Choose Configuration > Policies > Global Correlation > Network Participation..Step 3.To turn on network participation, click the Partial or Full radio button:..Partial—Data is contributed to the SensorBase Network, but data considered potentially sensitive is filtered out and never sent...Full—All data is contributed to the SensorBase Network 

In this case, we can see that this has been turned off as shown below: 

Q86. When a Cisco IPS is deployed in fail-closed mode, what are two conditions that can result in traffic being dropped? (Choose two.) 

A. The signature engine is undergoing the build process. 

B. The SDF failed to load. 

C. The built-in signatures are unavailable. 

D. An ACL is configured. 

Answer: A,B 

Q87. What command alters the SSL ciphers used by the Cisco Email Security Appliance for TLS 

sessions and HTTPS access? 

A. sslconfig 

B. sslciphers 

C. tlsconifg 

D. certconfig 


Q88. Which command can change the HTTPS SSL method on the Cisco ESA? 

A. sslconfig 

B. strictssl 

C. sshconfig 

D. adminaccessconfig 


Q89. What three alert notification options are available in Cisco IntelliShield Alert Manager? (Choose three.) 

A. Alert Summary as Text 

B. Complete Alert as an HTML Attachment 

C. Complete Alert as HTML 

D. Complete Alert as RSS 

E. Alert Summary as Plain Text 

F. Alert Summary as MMS 

Answer: A,B,C 

Q90. The Web Cache Communication Protocol (WCCP) is a content-routing protocol that can facilitate the redirection of traffic flows in real time. Your organization has deployed WCCP to redirect web traffic that traverses their Cisco Adaptive Security Appliances (ASAs) to their Cisco Web Security Appliances (WSAs). 

The simulator will provide access to the graphical user interfaces of one Cisco ASA and one Cisco WSA that are participating in a WCCP service. Not all aspects of the GUIs are implemented in the simulator. The options that have been implemented are sufficient to determine the best answer to each of the questions that are presented. 

Your task is to examine the details available in the simulated graphical user interfaces and select the best answer. 

How many Cisco ASAs and how many Cisco WSAs are participating in the WCCP service? 

A. One Cisco ASA or two Cisco ASAs configured as an Active/Standby failover pair, and one Cisco WSA. 

B. One Cisco ASA or two Cisco ASAs configured as an Active/Active failover pair, and one Cisco WSA. 

C. One Cisco ASA or two Cisco ASAs configured as an Active/Standby failover pair, and two Cisco WSAs. 

D. One Cisco ASA or two Cisco ASAs configured as an Active/Active failover pair, and two Cisco WSAs. 

E. Two Cisco ASAs and one Cisco WSA. 

F. Two Cisco ASAs and two Cisco WSAs. 



We can see from the output that the number of routers (ASA’s) is 1, so there is a single ASA or an active/ standby pair being used, and 1 Cache Engine. If the ASA’s were in a active/active role it would show up as 2 routers.