Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 241:

  Drag and Drop

  Refer to the exhibit. You have a business partner who has a host IP address of 209.165.202.130. You have a host object that has an IP address of 172.16.0.100. You need to create a NAT rule that allows 209.165.202.130 to connect over the Internet to 172.16.0.100 by using an object that has a public IP address of 209.165.200.228. The partner IP address must be translated to an internal IP address of 172.16.0.50 for security reasons. Drag and drop the NAT criteria options from the left onto the correct host objects on the right.

  

  Select and Place:

  

  

• Question 242:

  When a Cisco ASA is configured in multiple context mode, within which configuration are the interfaces allocated to the security contexts?

  A. each security context
  B. system configuration
  C. admin context (context with the "admin" role)
  D. context startup configuration file (.cfg file)
  B. system configuration

• Question 243:

  What are two primary purposes of Layer 2 detection in Cisco IPS networks? (Choose two.)

  A. identifying Layer 2 ARP attacks
  B. detecting spoofed MAC addresses and tracking 802.1X actions and data communication after a successful client association
  C. detecting and preventing MAC address spoofing in switched environments
  D. mitigating man-in-the-middle attacks
  A. identifying Layer 2 ARP attacks
  D. mitigating man-in-the-middle attacks

• Question 244:

  Which product can centrally manage a VPN policy that can be deployed to multiple firewalls?

  A. Cisco Configuration Professional
  B. Cisco prime LMS
  C. Cisco Security Manager
  D. Cisco Adaptive Security Device Manager
  C. Cisco Security Manager

• Question 245:

  CORRECT TEXT

  You are the network security engineer for the Secure-X network. The company has recently detected Increase of traffic to malware Infected destinations. The Chief Security Officer deduced that some PCs in the internal networks are infected

  with malware and communicate with malware infected destinations.

  The CSO has tasked you with enable Botnet traffic filter on the Cisco ASA to detect and deny further connection attempts from infected PCs to malware destinations. You are also required to test your configurations by initiating connections

  through the Cisco ASA and then display and observe the Real-Time Log Viewer in ASDM.

  To successfully complete this activity, you must perform the following tasks:

  Download the dynamic database and enable use of it.

  Enable the ASA to download of the dynamic database

  Enable the ASA to download of the dynamic database.

  Enable DNS snooping for existing DNS inspection service policy rules..

  Enable Botnet Traffic Filter classification on the outside interface for All Traffic.

  Configure the Botnet Traffic Filter to drop blacklisted traffic on the outside interface. Use the default Threat Level settings

  NOTE: The database files are stored in running memory; they are not stored in flash memory.

  NOTE: DNS is enabled on the inside interface and set to the HQ-SRV (10.10.3.20).

  NOTE: Not all ASDM screens are active for this exercise.

  Verify that the ASA indeed drops traffic to blacklisted destinations by doing the following:

  From the Employee PC, navigate to http://www.google.com to make sure that access to the Internet is working.

  From the Employee PC, navigate to http://bot-sparta.no-ip.org. This destination is classified as malware destination by the Cisco SIO database.

  From the Employee PC, navigate to http://superzarabotok-gid.ru/. This destination is classified as malware destination by the Cisco SIO database.

  From Admin PC, launch ASDM to display and observe the Real-Time Log Viewer.

  You have completed this exercise when you have configured and successfully tested Botnet traffic filter on the Cisco ASA.

  

  

  Correct Answer. Check the answer below
  Check the answer below

  ---

  Answer: See the explanation for detailed answer to this sim question. First, click on both boxes on the Botnet Database as shown below and hit apply:

  

  Click Yes to send the commands when prompted.

  Then, click on the box on the DNS Snooping page as shown below and hit apply:

  

  Click Yes to send the commands when prompted.

  Then, click on the box on the Traffic Settings tab as shown:

  

  At which point this pop-up box will appear when you click on the Add button:

  

  Click OK. Then Apply. Then Send when prompted.

  Then verify that all is working according to the instructions given in the question.

• Question 246:

  A Cisco ASA requires an additional feature license to enable which feature?

  A. transparent firewall
  B. cut-thru proxy
  C. threat detection
  D. botnet traffic filtering
  E. TCP normalizer
  D. botnet traffic filtering

• Question 247:

  Hotspot Question Which statement is true of the logging configuration on the Cisco ASA?

  

  

  A. The contents of the internal buffer will be saved to an FTP server before the buffer is overwritten.
  B. The contents of the internal buffer will be saved to flash memory before the buffer is overwritten.
  C. System log messages with a severity level of six and higher will be logged to the internal buffer.
  D. System log messages with a severity level of six and lower will be logged to the internal buffer.
  C. System log messages with a severity level of six and higher will be logged to the internal buffer.

• Question 248:

  Refer to the exhibit. Which command can produce this packet tracer output on a firewall?

  

  A. packet-tracer input INSIDE tcp 192.168.1.100 88 192.168.2.200 3028
  B. packet-tracer output INSIDE tcp 192.168.1.100 88 192.168.2.200 3028
  C. packet-tracer input INSIDE tcp 192.168.2.200 3028 192.168.1.100 88
  D. packet-tracer output INSIDE tcp 192.168.2.200 3028 192.168.1.100 88
  A. packet-tracer input INSIDE tcp 192.168.1.100 88 192.168.2.200 3028

• Question 249:

  Where on a firewall does an administrator assign interfaces to contexts?

  A. in the system execution space
  B. in the admin context
  C. in a user-defined context
  D. in the console
  A. in the system execution space

• Question 250:

  Which two attacks are common at Layer 2? (Choose two)

  A. teardrop attack
  B. MAC spoofing
  C. DHCP spoofing
  D. ICMP attacks
  E. packet sniffing
  B. MAC spoofing
  C. DHCP spoofing