Cisco Exam 300-207 Has Been Retired By Cisco

Cisco exam 300-207 has been retired by Cisco on 31-Mar-2017.

300-207 Sample Question

Question: 21

What are three best practices for a Cisco Intrusion Prevention System? (Choose three.)

A. Checking for new signatures every 4 hours
B. Checking for new signatures on a staggered schedule
C. Automatically updating signature packs
D. Manually updating signature packs
E. Group tuning of signatures
F. Single tuning of signatures

Answer: B,C,E

300-207 Sample Question

Question: 20

A new Cisco IPS device has been placed on the network without prior analysis. Which CLI command shows the most fired signature?

A. Show statistics virtual-sensor
B. Show event alert
C. Show alert
D. Show version

Answer: A

300-207 Sample Question

Question: 19

What is the default IP range of the external zone?

A. 0.0.0.0 0.0.0.0
B. 0.0.0.0 - 255.255.255.255
C. 0.0.0.0/8
D. The network of the management interface

Answer: B

300-207 Sample Question

Question: 18

What is the CLI command to create a new Message Filter in a Cisco Email Security Appliance?

A. filterconfig
B. filters new
C. messagefilters
D. policyconfig-- inbound or outbound-- filters

Answer: B

300-207 Sample Question

Question: 17

Which three options are valid event actions for a Cisco IPS? (Choose three.)

A. deny-packet-inline
B. deny-attack-reset
C. produce-verbose-alert
D. log-attacker-packets
E. deny-packet-internal
F. request-block-drop-connection

Answer : A,C,D

300-207 Sample Question

Question: 16

Who or what calculates the signature fidelity rating?

A. the signature author
B. Cisco Professional Services
C. the administrator
D. the security policy

Answer : A