Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 281:

  Refer to the exhibit. What is the effect of this configuration?

  

  A. The firewall will inspect IP traffic only between networks 192.168.1.0 and 192.168.2.0.
  B. The firewall will inspect all IP traffic except traffic to 192.168.1.0 and 192.168.2.0.
  C. The firewall will inspect traffic only if it is defined within a standard ACL.
  D. The firewall will inspect all IP traffic.
  A. The firewall will inspect IP traffic only between networks 192.168.1.0 and 192.168.2.0.

• Question 282:

  Within Cisco Prime Infrastructure, which configuration Archive task will allow you to specify when to copy the running configuration to the startup configuration?

  A. Schedule Deploy
  B. Schedule Overwrite
  C. Schedule Archive
  D. Schedule Rollback
  B. Schedule Overwrite

• Question 283:

  Refer to the exhibit. A network engineer applies the configuration shown to set up a capture on a Cisco Adaptive Security Appliance. When attempting to start a capture, this error message is observed:

  ERROR: Capture doesn't support access-list <20> containing mixed policies

  For which two reasons does this error message occur? (Choose two.)

  

  A. The ACL number is incorrect.
  B. Access list type is incorrect.
  C. IPv6 is enabled on the Cisco ASA.
  D. A named ACL is required.
  E. IPv6 is not specified on the access list with "any4" keyword.
  D. A named ACL is required.
  E. IPv6 is not specified on the access list with "any4" keyword.

• Question 284:

  Which two options are private-VLAN secondary VLAN types? (Choose two)

  A. Isolated
  B. Secured
  C. Community
  D. Common
  E. Segregated
  A. Isolated
  C. Community

• Question 285:

  Which command enables the HTTP server daemon for Cisco ASDM access?

  A. http server enable
  B. http server enable 443
  C. crypto key generate rsa modulus 1024
  D. no http server enable
  A. http server enable

• Question 286:

  When troubleshooting redundant interface operations on the Cisco ASA, which configuration should be verified?

  A. The nameif configuration on the member physical interfaces are identical.
  B. The MAC address configuration on the member physical interfaces are identical.
  C. The active interface is sending periodic hellos to the standby interface.
  D. The IP address configuration on the logical redundant interface is correct.
  E. The duplex and speed configuration on the logical redundant interface are correct.
  D. The IP address configuration on the logical redundant interface is correct.

• Question 287:

  You fail to communicate with a target device by using the Cisco Security Manager console. Which two tasks do you perform to allow communication? (Choose two)

  A. Enable SNMPv2 on the target device.
  B. Enable SNMPv3 on the target device.
  C. Verify that the device properties correctly configured.
  D. Enable SSL/HTTPS on the target device
  E. Enable device monitoring Cisco Security Manager
  C. Verify that the device properties correctly configured.
  D. Enable SSL/HTTPS on the target device

• Question 288:

  Which Cisco ASA (8.4.1 and later) CLI command is the best command to use for troubleshooting SSH connectivity from the Cisco ASA appliance to the outside 192.168.1.1 server?

  A. telnet 192.168.1.1 22
  B. ssh -l username 192.168.1.1
  C. traceroute 192.168.1.1 22
  D. ping tcp 192.168.1.1 22
  E. packet-tracer input inside tcp 10.0.1.1 2043 192.168.4.1 ssh
  D. ping tcp 192.168.1.1 22

• Question 289:

  Which benefit of using centralized management to manage a Cisco IronPort ESA is true?

  A. It reduces licensing cost
  B. It requires no initial setup
  C. It requires a light client on managed devices
  D. It reduces administration time
  D. It reduces administration time

• Question 290:

  What are two high-level task areas in a Cisco Prime Infrastructure life-cycle workflow? (Choose two.)

  A. Design
  B. Operate
  C. Maintain
  D. Log
  E. Evaluate
  A. Design
  B. Operate