Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 421:

  

  SNMP users have a specified username, a group to which the user belongs, authentication password, encryption password, and authentication and encryption algorithms to use. The authentication algorithm options are MD5 and SHA. The encryption algorithm options are DES, 3DES, andAES (which is available in 128,192, and 256 versions). When you create a user, with which option must you associate it?

  A. an SNMP group
  B. at least one interface
  C. the SNMP inspection in the global_policy
  D. at least two interfaces
  A. an SNMP group

  ---

  This can be verified via the ASDM screen shot shown here:

  

• Question 422:

  Which two capabilities of Cisco Security Manager are true? (Choose two)

  A. It manages Cisco ACS server
  B. It adds a device that does not exist on the network
  C. It reports the events of an FWSM device.
  D. It rolls back a configuration to a previous configuration
  E. It manages the certificates of a user
  C. It reports the events of an FWSM device.
  D. It rolls back a configuration to a previous configuration

• Question 423:

  Which cloud characteristic is used to describes the sharing of physical resource between various entities ?

  A. Elasticity
  B. Ubiquitous access C. Multitenancy
  D. Resiliency
  C

• Question 424:

  After a session has been secured with MACsec, which two types of traffic can be sent and received unencrypted?

  A. EAPOL-Start
  B. DHCP offer
  C. Cisco Discovery Protocol
  D. DHCP discover
  E. EAPOL-Logoff
  A. EAPOL-Start
  C. Cisco Discovery Protocol

• Question 425:

  Which two statements about zone-based firewalls are true? (Choose two.)

  A. More than one interface can be assigned to the same zone.
  B. Only one interface can be in a given zone.
  C. An interface can only be in one zone.
  D. An interface can be a member of multiple zones.
  E. Every device interface must be a member of a zone.
  A. More than one interface can be assigned to the same zone.
  C. An interface can only be in one zone.

• Question 426:

  An engineer has downloaded the database files for botnet traffic filtering on an ASA. Where are these database files stored?

  A. flash memory
  B. SSD drive
  C. ROMMON
  D. running memory
  A. flash memory

• Question 427:

  Which two commands can be used to create a Cisco Unified ACL within the ASA CLI? (Choose two.)

  A. ipv6 access-list
  B. object-group network
  C. ipv6 access-list webtype
  D. access-list extended
  E. object-group network nat-pat-grp
  B. object-group network
  D. access-list extended

• Question 428:

  What feature must be enabled on Cisco ASA to inspect encrypted voice signalisation traffic between IP Phones and UCM?

  A. TLS Proxy
  B. Mobility Proxy
  C. Presence Federation Proxy
  D. SCCP inspection
  A. TLS Proxy

• Question 429:

  In which way are management packets classified on a firewall that operates in multiple context mode?

  A. by their interface IP address
  B. by the routing table
  C. by NAT
  D. by their MAC addresses
  A. by their interface IP address

• Question 430:

  Which type of object group will allow configuration for both TCP 80 and TCP 443?

  A. service
  B. network
  C. time range
  D. user group
  A. service