Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 11:

  Which three Cisco ASA configuration commands are used to enable the Cisco ASA to log only the debug output to syslog? (Choose three.)

  A. logging list test message 711001
  B. logging debug-trace
  C. logging trap debugging
  D. logging message 711001 level 7
  E. logging trap test
  A. logging list test message 711001
  B. logging debug-trace
  E. logging trap test

• Question 12:

  When you enable IP source Guard on private VLAN ports, which additional action must you take for IP Source Guard to be effective?

  A. Enable DHCP snooping on the isolated VLAN
  B. Enable BPDU guard on the isolated VLAN.
  C. Enable BPDU guard on the primary VLAN.
  D. Enable DHCP snooping on the primary VLAN.
  D. Enable DHCP snooping on the primary VLAN.

• Question 13:

  What are two enhancements of SSHv2 over SSHv1? (Choose two.)

  A. VRF-aware SSH support
  B. DH group exchange support
  C. RSA support
  D. keyboard-interactive authentication
  E. SHA support
  A. VRF-aware SSH support
  B. DH group exchange support

• Question 14:

  In the default global policy, which traffic is matched for inspections by default?

  A. match any
  B. match default-inspection-traffic
  C. match access-list
  D. match port
  E. match class-default
  B. match default-inspection-traffic

• Question 15:

  Which utility can you use to troubleshoot and determine the timeline of packet changes in a data path within a Cisco firewall?

  A. packet tracer
  B. ping
  C. traceroute
  D. SNMP walk
  A. packet tracer

• Question 16:

  Which product can manage licenses, updates, and a single signature policy for 15 separate IPS appliances?

  A. Cisco Security Manager
  B. Cisco IPS Manager Express
  C. Cisco IPS Device Manager
  D. Cisco Adaptive Security Device Manager
  A. Cisco Security Manager

• Question 17:

  Which configuration step is the first to enable PIM-SM on the Cisco ASA appliance?

  A. Configure the static RP IP address.
  B. Enable IGMP forwarding on the required interface(s).
  C. Add the required static mroute(s).
  D. Enable multicast routing globally on the Cisco ASA appliance.
  E. Configure the Cisco ASA appliance to join the required multicast groups.
  D. Enable multicast routing globally on the Cisco ASA appliance.

• Question 18:

  What option needs to be used to enable Authentication and Encryption in SNMPv3?

  A. Encry
  B. Auth
  C. Priv
  C. Priv

• Question 19:

  Which two unified communications protocols can be inspected for an anomaly by using the Cisco ASA 5500 Series firewall? (Choose two.)

  A. RSH
  B. SCP
  C. MGCP
  D. TFTP
  E. RTSP
  C. MGCP
  E. RTSP

• Question 20:

  Which two statements about deploying the Cisco ASAv with VM ware are true? (Choose two.)

  A. The Day 0 file is required for the ASAv and the vSphere switch.
  B. The vCPU and memory allocation can be changed on the fly in accordance with performance requirements.
  C. If the virtual appliance is running in transparent firewall mode, the vSphere switch Promiscuous Mode security exception must be set to Accept.
  D. It can be deployed with either the vSphere standalone client or the OVF tool.
  E. In a failover configuration, the primary and standby devices can use different model licenses as long as both devices fully support the failover configuration.
  C. If the virtual appliance is running in transparent firewall mode, the vSphere switch Promiscuous Mode security exception must be set to Accept.
  D. It can be deployed with either the vSphere standalone client or the OVF tool.