Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 1:

  When access rule properties are configured within ASDM, which traffic direction type is required by global and management access rule?

  A. Any
  B. Both in and out
  C. In
  D. Out
  C. In

• Question 2:

  Which statement about static or default route on the Cisco ASA appliance is true?

  A. The admin distance is 1 by default.
  B. From the show route output, the [120/3] indicates an admin distance of 3.
  C. A default route is specified using the 0.0.0.0 255.255.255.255 address/mask combination.
  D. The tunneled command option is used to enable route tracking.
  E. The interface-name parameter in the route command is an optional parameter if the static route points to the next-hop router IP address.
  A. The admin distance is 1 by default.

• Question 3:

  An engineer suspects that client workstations are experiencing extremely poor response time due to a man in middle attack. Which feature must be enabled and configured to provide relief from this type of attack?

  A. Internet Key Exchange
  B. Link Aggregation
  C. Reverse ARP
  D. Dynamic ARP Inspection
  E. private VLANs
  D. Dynamic ARP Inspection

• Question 4:

  What is the default behavior of an access list on the Cisco ASA security appliance?

  A. It will permit or deny traffic based on the access-list criteria.
  B. It will permit or deny all traffic on a specified interface.
  C. An access group must be configured before the access list will take effect for traffic control.
  D. It will allow all traffic.
  C. An access group must be configured before the access list will take effect for traffic control.

• Question 5:

  Which two options can be used when configuring a packet capture from the command line within the ASA using the capture command? (Choose two.)

  A. host
  B. snap-length
  C. type
  D. detail
  E. real-time
  C. type
  E. real-time

• Question 6:

  Which Cisco prime Infrastructure features allows you to assign templates to a group of wireless LAN controllers with similar configuration requirements?

  A. Lightweight access point configuration template
  B. Composite template
  C. Controller configuration group
  D. Shared policy object
  C. Controller configuration group

• Question 7:

  What are three attributes that can be applied to a user account with RBAC? (Choose three.)

  A. domain
  B. password
  C. ACE tag
  D. user roles
  E. VDC group tag
  F. expiry date
  B. password
  D. user roles
  F. expiry date

• Question 8:

  Control plane thresholding limit for which protocols

  A. ICMP
  B. BGP
  C. ARP
  B. BGP

• Question 9:

  The Cisco ASA software image has been erased from flash memory. Which two statements about the process to recover the Cisco ASA software image are true? (Choose two.)

  A. Access to the ROM monitor mode is required.
  B. The Cisco ASA appliance must have connectivity to the TFTP server where the Cisco ASA image is stored through the Management 0/0 interface.
  C. The copy tftp flash command is necessary to start the TFTP file transfer.
  D. The server command is necessary to set the TFTP server IP address.
  E. Cisco ASA password recovery must be enabled.
  A. Access to the ROM monitor mode is required.
  D. The server command is necessary to set the TFTP server IP address.

• Question 10:

  Which three configurations tasks do you perform to allow Not Flow on a Cisco ASA G500 Series firewall? (Choose three)

  A. Apply the newly created class map to the global policy.
  B. Enable NetFlow Version 9.
  C. Create a class map match interesting traffic.
  D. Create an ACL to allow UDP traffic on port 9996.
  E. Define a NetFlow collector by using the flow-export command.
  F. Apply NetFlow Exporter to the outside interface in the inbound direction
  A. Apply the newly created class map to the global policy.
  C. Create a class map match interesting traffic.
  E. Define a NetFlow collector by using the flow-export command.