Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 21:

  When will a Cisco ASA that is operating in transparent firewall mode perform a routing table lookup instead of a MAC address table lookup to determine the outgoing interface of a packet?

  A. if multiple context mode is configured
  B. if the destination MAC address is unknown
  C. if the destination is more than a hop away from the Cisco ASA
  D. if NAT is configured
  E. if dynamic ARP inspection is configured
  D. if NAT is configured

• Question 22:

  An engineer must secure a current monitoring environment by using the strongest encryption allowed within SNMPv3 configuration. Which two encryption methods meet this requirement? (Choose two.)

  A. 3DES
  B. AES
  C. RSA-SIG
  D. DES
  E. MD5
  A. 3DES
  B. AES

• Question 23:

  When it is configured in accordance to Cisco best practices, the switchport port-security maximum command can mitigate which two types of Layer 2 attacks? (Choose two.)

  A. rogue DHCP servers
  B. ARP attacks
  C. DHCP starvation
  D. MAC spoofing
  E. CAM attacks
  F. IP spoofing
  C. DHCP starvation
  E. CAM attacks

• Question 24:

  Which option is a consequence when an engineer changes the snmp server local engineID in router?

  A. The SNMP configuration that was created previously is invalid.
  B. The users that were created previously are invalid.
  C. The community that was created previously is invalid.
  D. The groups that were created previously are invalid
  B. The users that were created previously are invalid.

• Question 25:

  What are the three types of private VLAN ports? (Choose three.)

  A. promiscuous
  B. isolated
  C. community
  D. primary
  E. secondary
  F. trunk
  A. promiscuous
  B. isolated
  C. community

• Question 26:

  Your company is replacing a high-availability pair of Cisco ASA 5550 firewalls with the newer Cisco ASA 5555-X models. Due to budget constraints, one Cisco ASA 5550 will be replaced at a time. Which statement about the minimum requirements to set up stateful failover between these two firewalls is true?

  A. You must install the USB failover cable between the two Cisco ASAs and provide a 1 Gigabit Ethernet interface for state exchange.
  B. It is not possible to use failover between different Cisco ASA models.
  C. You must have at least 1 Gigabit Ethernet interface between the two Cisco ASAs for state exchange.
  D. You must use two dedicated interfaces. One link is dedicated to state exchange and the other link is for heartbeats.
  B. It is not possible to use failover between different Cisco ASA models.

• Question 27:

  Which two options are purposes of the packet-tracer command? (Choose two.)

  A. to filter and monitor ingress traffic to a switch
  B. to configure an interface-specific packet trace
  C. to simulate network traffic through a data path
  D. to debug packet drops in a production network
  E. to automatically correct an ACL entry in an ASA
  C. to simulate network traffic through a data path
  D. to debug packet drops in a production network

• Question 28:

  Which command is the first that you enter to check whether or not ASDM is installed on the ASA?

  A. Show ip
  B. Show running-config asdm
  C. Show running-config boot
  D. Show version
  E. Show route
  D. Show version

• Question 29:

  Refer to the exhibit. To protect Host A and Host B from communicating with each other, which type of PVLAN port should be used for each host?

  

  A. Host A on a promiscuous port and Host B on a community port
  B. Host A on a community port and Host B on a promiscuous port
  C. Host A on an isolated port and Host B on a promiscuous port
  D. Host A on a promiscuous port and Host B on a promiscuous port
  E. Host A on an isolated port and host B on an isolated port
  F. Host A on a community port and Host B on a community port
  E. Host A on an isolated port and host B on an isolated port

• Question 30:

  Which two web browsers are supported for the Cisco ISE GUI? (Choose two.)

  A. HTTPS-enabled Mozilla Firefox version 3.x
  B. Netscape Navigator version 9
  C. Microsoft Internet Explorer version 8 in Internet Explorer 8-only mode
  D. Microsoft Internet Explorer version 8 in all Internet Explorer modes
  E. Google Chrome (all versions)
  A. HTTPS-enabled Mozilla Firefox version 3.x
  C. Microsoft Internet Explorer version 8 in Internet Explorer 8-only mode