Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 31:

  If the Cisco ASA 1000V has too few licenses, what is its behavior?

  A. It drops all traffic.
  B. It drops all outside-to-inside packets.
  C. It drops all inside-to-outside packets.
  D. It passes the first outside-to-inside packet and drops all remaining packets.
  D. It passes the first outside-to-inside packet and drops all remaining packets.

• Question 32:

  Company configure Privat VLAN and it will add a new server. What port it will use that allow to communicate with all interfaces?

  A. Promiscuous
  B. Community
  C. Isolated
  A. Promiscuous

• Question 33:

  By default, which traffic can pass through a Cisco ASA that is operating in transparent mode without explicitly allowing it using an ACL?

  A. ARP
  B. BPDU
  C. CDP
  D. OSPF multicasts
  E. DHCP
  A. ARP

• Question 34:

  Which information is NOT replicated to the secondary Cisco ASA adaptive security appliance in an active/standby configuration with stateful failover links ?

  A. TCP sessions
  B. DHCP lease
  C. NAT translations
  D. Routing tables
  B. DHCP lease

• Question 35:

  Configuration of SSH on ASA

  

  Correct Answer. Check the answer below
  Check the answer below

  ---

  Cisco ASA correction:

  domain-name

  crypto key generate rsa modulus

  ssh version 2

  enable password

  username password

  aaa authentication ssh console LOCAL

  ssh

  Cisco IOS correction:

  domain-name crypto key generate rsa modulus ip ssh version 2 enable secret 0 username secret 0 aaa new-model aaa authentication login default local-case enable line vty 0 4 transport input ssh login authentication default

• Question 36:

  An enterprise is hosting an application that opens a secondary UDP point. The initial session on a well-known port is used to negotiate the secondary dynamically assigned port. Which feature on Cisco ASA monitors sessions to identify the dynamic port assignments and permits sata exchange on these ports?

  A. Allow Any
  B. NAT
  C. Protocol Inspection
  D. High and Low Security level
  C. Protocol Inspection

• Question 37:

  Which hypervisor technology is supported by Cisco ASA 1000V Cloud Firewall?

  A. KVM
  B. XenServer
  C. Hyper-V
  D. VMware vSphere
  D. VMware vSphere

• Question 38:

  Which two capabilities of cisco security manager are true?

  A. it adds a device that does not exist on the network
  B. it manages the certificates of a user
  C. it rolls back a configuration to a previous configuration
  D. it reports the events of an fwsm device
  E. it manages cisco acs servers
  D. it reports the events of an fwsm device
  E. it manages cisco acs servers

• Question 39:

  Refer to the exhibit. Which two statements about this firewall output are true? (Choose two.)

  

  A. The output is from a packet tracer debug.
  B. All packets are allowed to 192.168.1.0 255.255.0.0.
  C. All packets are allowed to 192.168.1.0 255.255.255.0.
  D. All packets are denied.
  E. The output is from a debug all command.
  A. The output is from a packet tracer debug.
  C. All packets are allowed to 192.168.1.0 255.255.255.0.

• Question 40:

  What is the default log level on the Cisco Web Security Appliance?

  A. Trace
  B. Debug
  C. Informational
  D. Critical
  C. Informational