Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 301:

  Which technology can be deployed with a Cisco ASA 1000V to segregate Layer 2 access within a virtual cloud environment?

  A. Cisco Nexus 1000V
  B. Cisco VSG
  C. WSVA
  D. ESVA
  A. Cisco Nexus 1000V

• Question 302:

  An engineer must implement an SNMPv3 user named Andy assigned to group myv3 for monitoring on the host of 10.255.254.1 for the Cisco ASA. Which configuration must be used to ensure the strongest security settings for these requirements?

  A. asa-host(config)#snmp-server group myv3 v3 priv asa-host(config)#snmp-server user andy myv3 auth sha cisco priv des asa1234 asa-host(config) #snmp-server host inside 10.255.254.1 version 3 andy
  B. asa-host(config)#snmp-server group myv3 v3 priv asa-host(config)#snmp-server user andy myv3 auth sha cisco priv aes 256 asa1234 asa-host(config) #snmp-server host inside 10.255.254.1 version 3 andy
  C. asa-host(config)#snmp-server group myv3 v3 noauth asa-host(config)#snmp-server user andy myv3 auth sha cisco priv 3des asa1234 asa-host(config) #snmp-server host inside 10.255.254.1 version 3 andy
  D. asa-host(config)#snmp-server group myv3 v3 noauth asa-host(config)#snmp-server user andy myv3 auth sha cisco priv aes 256 asa1234 asa-host(config) #snmp-server host inside 10.255.254.1 version 3 andy
  B. asa-host(config)#snmp-server group myv3 v3 priv asa-host(config)#snmp-server user andy myv3 auth sha cisco priv aes 256 asa1234 asa-host(config) #snmp-server host inside 10.255.254.1 version 3 andy

• Question 303:

  When an engineer is configuring DHCP snooping, which configuration parameter is enabled by default?

  A. DHCP snooping host tracking feature
  B. DHCP snooping MAC address verification
  C. DHCP snooping relay agent
  D. DHCP snooping information option-82
  B. DHCP snooping MAC address verification

• Question 304:

  Which three compliance and audit report types are available in Cisco Prime Infrastructure? (Choose three.)

  A. Service
  B. Change Audit
  C. Vendor Advisory
  D. TAC Service Request
  E. Validated Design
  F. Smart Business Architecture
  A. Service
  B. Change Audit
  C. Vendor Advisory

• Question 305:

  Refer to the exhibit. Server A is a busy server that offers these services:

  -World Wide Web

  -DNS

  Which command captures http traffic from Host A to Server A?

  

  A. capture traffic match udp host 10.1.1.150 host 10.2.2.100
  B. capture traffic match 80 host 10.1.1.150 host 10.2.2.100
  C. capture traffic match ip 10.2.2.0 255.255.255.192 host 10.1.1.150
  D. capture traffic match tcp host 10.1.1.150 host 10.2.2.100
  E. capture traffic match tcp host 10.2.2.100 host 10.1.1.150 eq 80
  D. capture traffic match tcp host 10.1.1.150 host 10.2.2.100

• Question 306:

  You are going to add ASA to CSM (Cisco Security Manager). Which port on ASA must be reachable for CSM to succeed?

  A. 21
  B. 22
  C. 80
  D. 443
  D. 443

• Question 307:

  What security model enables both authentication and encryption in SNMPv3?

  A. encr
  B. auth
  C. priv
  D. encapsulation
  E. tunnel
  C. priv

• Question 308:

  An engineer has found that threat detection has been turned on by default on a Cisco ASA.

  Which two security events are monitored? (Choose two.)

  A. number of times the rates were exceeded
  B. total number of malformed packets received
  C. denial of service attack occurrences
  D. packets allowed by the inspection engine
  E. concurrent NAT interface overload addresses
  A. number of times the rates were exceeded
  C. denial of service attack occurrences

• Question 309:

  Which command is used to nest objects in a pre-existing group?

  A. object-group
  B. network group-object
  C. object-group network
  D. group-object
  D. group-object

• Question 310:

  Which two device types can Cisco Prime Security Manager manage in Multiple Device mode? (Choose two.)

  A. Cisco ESA
  B. Cisco ASA
  C. Cisco WSA
  D. Cisco ASA CX
  B. Cisco ASA
  D. Cisco ASA CX