Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 331:

  Which command tests authentication with SSH and shows a generated key?

  A. show key mypubkey rsa
  B. show crypto key mypubkey rsa
  C. show crypto key
  D. show key mypubkey
  B. show crypto key mypubkey rsa

• Question 332:

  Which statement about Cisco ASA multicast routing support is true?

  A. The Cisco ASA appliance supports PIM dense mode, sparse mode, and BIDIR-PIM.
  B. The Cisco ASA appliance supports only stub multicast routing by forwarding IGMP messages from multicast receivers to the upstream multicast router.
  C. The Cisco ASA appliance supports DVMRP and PIM.
  D. The Cisco ASA appliance supports either stub multicast routing or PIM, but both cannot be enabled at the same time.
  E. The Cisco ASA appliance supports only IGMP v1.
  D. The Cisco ASA appliance supports either stub multicast routing or PIM, but both cannot be enabled at the same time.

• Question 333:

  Host cannot communicate with server. Traffic goes through ASA. Which cli command can confirm if ASA is blocking traffic or not?

  A. Capture
  A. Capture

• Question 334:

  A rogue device has connected to the network and has become the STP root bridge, which has caused a network availability issue. Which two commands can protect against this problem? (Choose two.)

  A. switch(config)#spanning-tree portfast bpduguard default
  B. switch(config)#spanning-tree portfast bpdufilter default
  C. switch(config-if)#spanning-tree portfast
  D. switch(config-if)#spanning-tree portfast disable
  E. switch(config-if)#switchport port-security violation protect
  F. switch(config-if)#spanning-tree port-priority 0
  A. switch(config)#spanning-tree portfast bpduguard default
  C. switch(config-if)#spanning-tree portfast

• Question 335:

  Which option is a Cisco best practice when configuring traffic storm control?

  A. Configure 100 percent level to suppress all traffic.
  B. Configure on the port channel interface of an EtherChannel.
  C. Configure traffic storm control on ports that are members of an EtherChannel.
  D. Configure additional capacity as port speed increase.
  B. Configure on the port channel interface of an EtherChannel.

• Question 336:

  How to set up that incoming traffic is going via same interface as outgoing traffic?

  A. Intra-interface-anytime an ASA receives traffic on an interface and it is to route the traffic back out the same interface (same-security-traffic permit intra-interface)
  B. Inter-interface-anytime an ASA receives traffic on an interface and is to route the traffic out another interface of equal security level. (same-security-traffic permit inter-interface)
  A. Intra-interface-anytime an ASA receives traffic on an interface and it is to route the traffic back out the same interface (same-security-traffic permit intra-interface)
  B. Inter-interface-anytime an ASA receives traffic on an interface and is to route the traffic out another interface of equal security level. (same-security-traffic permit inter-interface)

• Question 337:

  Which Cisco Security Manager form factor is recommended for deployments with fewer than 25 devices?

  A. only Cisco Security Manager Standard
  B. only Cisco Security Manager Professional
  C. only Cisco Security Manager UCS Server Bundle
  D. both Cisco Security Manager Standard and Cisco Security Manager Professional
  A. only Cisco Security Manager Standard

• Question 338:

  You need to increase the level of security for the management traffic accessing a Cisco router. You plan to enable HTTPS.

  Which action do you take on the router?

  A. Disable TCP port 23.
  B. Generate an RSA key.
  C. Enable SCP.
  D. Enable TLS.
  D. Enable TLS.

• Question 339:

  Which protocol is used by Prime Infrastructure to discover the devices via web? (Choose three)

  A. ARP
  B. OSPF
  C. SNMP
  D. BGP
  E. NetFlow
  B. OSPF
  C. SNMP
  D. BGP

• Question 340:

  An administrator is deploying port-security to restrict traffic from certain ports to specific MAC addresses. Which two considerations must an administrator take into account when using the switchport port-security mac-address sticky command? (Choose two.)

  A. The configuration will be updated with MAC addresses from traffic seen ingressing the port. The configuration will automatically be saved to NVRAM if no other changes to the configuration have been made.
  B. The configuration will be updated with MAC addresses from traffic seen ingressing the port. The configuration will not automatically be saved to NVRAM.
  C. Only MAC addresses with the 5th most significant bit of the address (the 'sticky' bit) set to 1 will be learned.
  D. If configured on a trunk port without the 'vlan' keyword, it will apply to all vlans.
  E. If configured on a trunk port without the 'vlan' keyword, it will apply only to the native vlan.
  B. The configuration will be updated with MAC addresses from traffic seen ingressing the port. The configuration will not automatically be saved to NVRAM.
  E. If configured on a trunk port without the 'vlan' keyword, it will apply only to the native vlan.