Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 161:

  Which two statements about Cisco IOS Firewall are true? (Choose two.)

  A. It provides stateful packet inspection.
  B. It provides faster processing of packets than Cisco ASA devices provide.
  C. It provides protocol-conformance checks against traffic.
  D. It eliminates the need to secure routers and switches throughout the network.
  E. It eliminates the need to secure host machines throughout the network.
  A. It provides stateful packet inspection.
  C. It provides protocol-conformance checks against traffic.

• Question 162:

  What is a benefit the iOS control plane protection?

  A. it allows QOS policing of aggregate control-panel
  B. it provides for early dropping of packets directed toward closed
  C. it prevents the input guide from being overwhelmed by any single
  D. it minimizes the number of unprocessed packets a protocol can have
  B. it provides for early dropping of packets directed toward closed

• Question 163:

  Which command displays syslog messages on the Cisco ASA console as they occur?

  A. Console logging
  B. Logging console
  C. Logging trap
  D. Terminal monitor
  E. Logging monitor
  B. Logging console

• Question 164:

  Which action is considered a best practice for the Cisco ASA firewall?

  A. Use threat detection to determine attacks
  B. Disable the enable password
  C. Disable console logging
  D. Enable ICMP permit to monitor the Cisco ASA interfaces
  E. Enable logging debug-trace to send debugs to the syslog server
  C. Disable console logging

• Question 165:

  Which activity is performed by the switch when Dynamic ARP inspection is configured?

  A. It intercepts all ARP requests and responses on untrusted ports.
  B. It forwards ARP packets that it receives on trusted ports, nust still checks them.
  C. It drops ARP packets for MAC addresses that are not present in the DHCP snooping database table.
  D. It bypasses all validation checks for MAC addresses that are present in the DHCP snooping database table.
  A. It intercepts all ARP requests and responses on untrusted ports.

• Question 166:

  Which set of commands enables logging and displays the log buffer on a Cisco ASA?

  A. enable logging show logging
  B. logging enable show logging
  C. enable logging int e0/1 view logging
  D. logging enable logging view config
  B. logging enable show logging

• Question 167:

  What two are data and voice protocols do ASA 5500 supports? (Choose two)

  A. CTIQBE Inspection
  B. H.323 Inspection
  C. MGCP Inspection
  D. RTSP Inspection
  E. SIP Inspection
  F. Skinny (SCCP) Inspection
  B. H.323 Inspection
  D. RTSP Inspection

• Question 168:

  Drag and Drop

  Drag and drop the Cisco Prime Security Manager available reports on the left onto the correct report examples on the right.

  Select and Place:

  

  

• Question 169:

  What is the result of the default ip ssh server authenticate user command?

  A. It enables the public key, keyboard, and password authentication methods.
  B. It enables the public key authentication method only.
  C. It enables the keyboard authentication method only.
  D. It enables the password authentication method only.
  A. It enables the public key, keyboard, and password authentication methods.

• Question 170:

  A network engineer has installed Cisco Security Manager 4.7 on a windows 2008 R2 SP1 server with 8 GB of RAM. When using the reporting feature, Cisco Security Manager frequently fails. Which option is the reason for this fault?

  A. Cisco Security Manager must be running Windows 2008 R2 Service Pack 2.
  B. Cisco Security Manager running all services must have minimum of 16 GB of RAM
  C. Cisco Security Manager is running on a domain controller
  D. Cisco Security Manager was not installed by a user with administrative rights.
  B. Cisco Security Manager running all services must have minimum of 16 GB of RAM