Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 221:

  An engineer wants to ensure that a multicontext Cisco ASA determines the proper context to send a packet.

  Which two classification criteria must be unique for each context for this determination to occur? (Choose two.)

  A. ARP table
  B. transparent forwarding
  C. session state
  D. interfaces
  E. MAC addresses
  D. interfaces
  E. MAC addresses

• Question 222:

  What are three features of the Cisco ASA 1000V? (Choose three.)

  A. cloning the Cisco ASA 1000V
  B. dynamic routing
  C. the Cisco VNMC policy agent
  D. IPv6
  E. active/standby failover
  F. QoS
  A. cloning the Cisco ASA 1000V
  C. the Cisco VNMC policy agent
  E. active/standby failover

• Question 223:

  Which command is used to disable Cisco Discovery Protocol globally on a router?

  A. Cdp disable
  B. No cdp enable
  C. No cdp
  D. No cdp run
  D. No cdp run

• Question 224:

  Which statement describes what the arp outside 1.1.1.1 0192.7gid.0020 command accomplishes?

  A. enable ARP inspection for host 1.1.1.1
  B. configures proxy ARP for host 1.1.1.1
  C. assigns virtual MAC address for host 1.1.1.1
  D. creates static ARP entry for host 1.1.1.1
  D. creates static ARP entry for host 1.1.1.1

• Question 225:

  An engineer suspect that client workstations are expecting poor response time due to man in the middle attack. How to fix it:

  A. key exchange
  B. private vlan
  C. Rev DNS
  D. link aggregation
  E. dynamic inspection
  E. dynamic inspection

• Question 226:

  What is the maximum jumbo frame size for IPS standalone appliances with 1G and 10G fixed or add-on interfaces?

  A. 1024 bytes
  B. 1518 bytes
  C. 2156 bytes
  D. 9216 bytes
  D. 9216 bytes

• Question 227:

  Which two mandatory policies are needed to support a regular IPsec VPN in a Cisco Security Manager environment? (Choose two.)

  A. GRE modes
  B. IKE proposal
  C. group encryption
  D. server load balance
  B. IKE proposal
  C. group encryption

• Question 228:

  Refer to the exhibit. Why was the packet dropped?

  

  (this exhibit is packet capture with traffic destination to port 23 and being drop by access- list)

  A. Telnet access is not allowed between these two nodes.
  B. NAT is not applied correctly for the 10.10.96.5 host
  C. The source port is configured incorrectly In the capture
  D. There is no route on the Cisco ASA to the destination host
  A. Telnet access is not allowed between these two nodes.

• Question 229:

  An engineer is trying to configure Dynamic ARP Inspection. Which feature must be enabled first?

  A. DHCP snooping
  B. Cisco Discovery Protocol
  C. port security
  D. IP Source Guard
  A. DHCP snooping

• Question 230:

  A hacker is sniffing network traffic from a Cisco Catalyst switch on a company network. Which three pieces of information can be obtained from intercepted Cisco Discovery Protocol traffic? (Choose three.)

  A. routing protocol
  B. encapsulation type
  C. bridge ID
  D. hardware platform
  E. VTP domain
  F. interface MAC address
  B. encapsulation type
  D. hardware platform
  E. VTP domain