Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 141:

  You moved your servers from physical to virtual infrastructure, how to defend it ?

  A. Cisco V
  B. Cisco ASA 1000V
  C. VXLAN
  D. VSG
  B. Cisco ASA 1000V
  D. VSG

• Question 142:

  Which additional Cisco ASA Software Version 8.3 NAT configuration is needed to meet the following requirements?

  When any host in the 192.168.1.0/24 subnet behind the inside interface accesses any destinations in the 10.10.1.0/24 subnet behind the outside interface, PAT them to the outside interface. Do not change the destination IP in the packet.

  A. nat (inside,outside) source static inside-net interface destination static outhosts outhosts
  B. nat (inside,outside) source dynamic inside-net interface destination static outhosts outhosts
  C. nat (outside,inside) source dynamic inside-net interface destination static outhosts outhosts
  D. nat (outside,inside) source static inside-net interface destination static outhosts outhosts
  E. nat (any, any) source dynamic inside-net interface destination static outhosts outhosts
  F. nat (any, any) source static inside-net interface destination static outhosts outhosts
  B. nat (inside,outside) source dynamic inside-net interface destination static outhosts outhosts

• Question 143:

  AS A Capture

  

  Correct Answer. Check the answer below
  Check the answer below

  ---

  asa_dataplane - Captures packets on the ASA backplane that pass between the ASA and a module that uses the backplane, such as the ASA CX or IPS module.

  ASA# cap asa_dataplace interface asa_dataplane

  ASA# show capture

  capture asa_dataplace type raw-data interface asa_dataplane [Capturing - 0 bytes]

  ?asp-drop drop-code - Captures packets that are dropped by the accelerated security path. The drop-code specifies the type of traffic that is dropped by the accelerated security path.

  ASA# capture asp-drop type asp-drop acl-drop

  2 packets captured

  1: 04:12:10.428093 192.168.10.10.34327 > 10.94.0.51.15868: S 2669456341:2669456341(0) win 4128 Drop-reason: (acl-drop) Flow is denied by configured rule

  2: 04:12:12.427330 192.168.10.10.34327 > 10.94.0.51.15868: S 2669456341:2669456341(0) win 4128 Drop-reason: (acl-drop) Flow is denied by configured rule 2 packets shown

  ?ethernet-type type - Selects an Ethernet type to capture. Supported Ethernet types include 8021Q, ARP, IP, IP6, IPX, LACP, PPPOED, PPPOES, RARP, and VLAN.

• Question 144:

  Which type of authentication and encryption does SNMPv3 use at the authNoPriv sec rity level?

  A. username authentication with MD5 or SIIA encryption
  B. DES authentication with MD5 or SHA encryption
  C. MD5 or SHA authentication with DES encryption
  D. username authentication without encryption
  E. username authentication it ion with DES, encryption
  F. MDG or SHA authentication without encryption
  F. MDG or SHA authentication without encryption

• Question 145:

  What configuration can affect snmp-server ID modification?

  A. Earlier snmp configuration
  B. Earlier snmp group
  C. Earlier snmp user
  D. SNMP is disabled
  E. SNMP is set to version 3
  C. Earlier snmp user

• Question 146:

  Which three logging methods are supported by Cisco routers? (Choose three.)

  A. console logging
  B. TACACS+ logging
  C. terminal logging
  D. syslog logging
  E. ACL logging
  F. RADIUS logging
  A. console logging
  C. terminal logging
  D. syslog logging

• Question 147:

  How much storage is allotted to maintain system, configuration, and image files on the Cisco ASA 1000V during OVF template file deployment?

  A. 1GB
  B. 5GB
  C. 2GB
  D. 10GB
  C. 2GB

• Question 148:

  Which three options are hardening techniques for Cisco IOS routers? (Choose three.)

  A. limiting access to infrastructure with access control lists
  B. enabling service password recovery
  C. using SSH whenever possible
  D. encrypting the service password
  E. using Telnet whenever possible
  F. enabling DHCP snooping
  A. limiting access to infrastructure with access control lists
  C. using SSH whenever possible
  D. encrypting the service password

• Question 149:

  Which three statements about the software requirements for a firewall failover configuration are true? (Choose three.)

  A. The firewalls must be in the same operating mode.
  B. The firewalls must have the same major and minor software version.
  C. The firewalls must be in the same context mode.
  D. The firewalls must have the same major software version but can have different minor versions.
  E. The firewalls can be in different context modes.
  F. The firewalls can have different Cisco AnyConnect images.
  A. The firewalls must be in the same operating mode.
  B. The firewalls must have the same major and minor software version.
  C. The firewalls must be in the same context mode.

• Question 150:

  A network engineer wants to add new view to an IOS device configured with RBAC. Which privilege is required for that task?

  A. Level 16
  B. Level 15
  C. root view
  D. admin view
  C. root view