Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 411:

  Refer to the exhibit.

  

  Which Information Is passed between the active and standby Cisco ASA firewalls over interface m0/0? (This exhibit asking for LAN failover Link features on ASA Failover)

  A. TCP connection status
  B. network link status
  C. ARP table
  D. SIP signaling session
  A. TCP connection status

• Question 412:

  Which three options correctly identify the Cisco ASA1000V Cloud Firewall? (Choose three.)

  A. operates at Layer 2
  B. operates at Layer 3
  C. secures tenant edge traffic
  D. secures intraswitch traffic
  E. secures data center edge traffic
  F. replaces Cisco VSG
  G. complements Cisco VSG
  H. requires Cisco VSG
  B. operates at Layer 3
  C. secures tenant edge traffic
  G. complements Cisco VSG

• Question 413:

  A Cisco ASA is configured for TLS proxy. When should the security appliance force remote IP phones connecting to the phone proxy through the internet to be in secured mode?

  A. When the Cisco Unified Communications Manager cluster is in non-secure mode
  B. When the Cisco Unified Communications Manager cluster is in secure mode only
  C. When the Cisco Unified Communications Manager is not part of a cluster
  D. When the Cisco ASA is configured for IPSec VPN
  A. When the Cisco Unified Communications Manager cluster is in non-secure mode

• Question 414:

  An attacker has gained physical access to a password protected router. Which command will prevent access to the startup-config in NVRAM?

  A. no service password-recovery
  B. no service startup-config
  C. service password-encryption
  D. no confreg 0x2142
  A. no service password-recovery

• Question 415:

  Which five options are valid logging destinations for the Cisco ASA? (Choose five.)

  A. AAA server
  B. Cisco ASDM
  C. buffer
  D. SNMP traps
  E. LDAP server
  F. email
  G. TCP-based secure syslog server
  B. Cisco ASDM
  C. buffer
  D. SNMP traps
  F. email
  G. TCP-based secure syslog server

• Question 416:

  Which statement describes a unique feature of Cisco NetFlow Secure Event Logging for Cisco ASAs?

  A. Multiple NetFlow collectors and NetFlow exporters are supported.
  B. Secure NetFlow connections are optimized for Cisco Prime Infrastructure.
  C. Flow-create events are delayed, which reduce overall traffic.
  D. Advanced NetFlow v9 templates and legacy v5 formatting are supported.
  D. Advanced NetFlow v9 templates and legacy v5 formatting are supported.

• Question 417:

  In IOS routers, what configuration can ensure both prevention of ntp spoofing and accurate time ensured?

  A. ACL permitting udp 123 from ntp server
  B. ntp authentication
  C. multiple ntp servers
  D. local system clock
  B. ntp authentication

• Question 418:

  At which firewall severity level will debugs appear on a Cisco ASA?

  A. 7
  B. 6
  C. 5
  D. 4
  A. 7

• Question 419:

  For which management session types does ASDM allow a maximum simultaneous connection limit to be set?

  A. ASDM, Telnet, SSH
  B. ASDM, Telnet, SSH, console
  C. ASDM, Telnet, SSH, VTY
  D. ASDM, Telnet, SSH, other
  A. ASDM, Telnet, SSH

• Question 420:

  A network engineer is asked to configure NetFlow to sample one of every 100 packets on a router's fa0/0 interface. Which configuration enables sampling, assuming that NetFlow is already configured and running on the router's fa0/0 interface?

  A. flow-sampler-map flow1 mode random one-out-of 100 interface fas0/0 flow-sampler flow1
  B. flow monitor flow1 mode random one-out-of 100 interface fas0/0 ip flow monitor flow1
  C. flow-sampler-map flow1 one-out-of 100 interface fas0/0 flow-sampler flow1
  D. ip flow-export source fas0/0 one-out-of 100
  A. flow-sampler-map flow1 mode random one-out-of 100 interface fas0/0 flow-sampler flow1