Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 431:

  Refer to the exhibit. Which type of ACL is shown in this configuration?

  

  A. IPv4
  B. IPv6
  C. unified
  D. IDFW
  C. unified

• Question 432:

  Your environment contains multiple buildings. When users move between the buildings, they change subnets dynamically by using DHCP.

  Which feature do you implement on the Cisco ASA Series firewall to allow a subset of the users in the Active Directory domain to access specific servers?

  A. RBAC
  B. extended ACL
  C. policy NAT
  D. IDFW
  D. IDFW

• Question 433:

  About User identity with domain (there is a screen), if user is not in domain, what identity will be?

  A. local
  B. default
  A. local

• Question 434:

  Which two configurations are necessary to enable password-less SSH login to an IOS router? (Choose two.)

  A. Enter a copy of the administrator's public key within the SSH key-chain
  B. Enter a copy of the administrator's private key within the SSH key-chain
  C. Generate a 512-bit RSA key to enable SSH on the router
  D. Generate an RSA key of at least 768 bits to enable SSH on the router
  E. Generate a 512-bit ECDSA key to enable SSH on the router
  F. Generate a ECDSA key of at least 768 bits to enable SSH on the router
  A. Enter a copy of the administrator's public key within the SSH key-chain
  D. Generate an RSA key of at least 768 bits to enable SSH on the router

• Question 435:

  A router is being enabled for SSH command line access. The following steps have been taken:

  - The vty ports have been configured with transport input SSH and login local.

  -Local user accounts have been created.

  -The enable password has been configured.

  What additional step must be taken if users receive a 'connection refused' error when attempting to access the router via SSH?

  A. A RSA keypair must be generated on the router
  B. An access list permitting SSH inbound must be configured and applied to the vty ports
  C. An access list permitting SSH outbound must be configured and applied to the vty ports
  D. SSH v2.0 must be enabled on the router
  A. A RSA keypair must be generated on the router

• Question 436:

  There is some custom application that on first communication channel negotiates second data channel for data transfer. What allows traffic from second negotiated data channel?

  A. packet reflection feature
  B. packet inspection feature
  C. host table
  D. communication table
  B. packet inspection feature

• Question 437:

  If you disable PortFast on switch ports that are connected to a Cisco ASA and globally turn on BPDU filtering, what is the effect on the switch ports?

  A. The switch ports are prevented from going into an err-disable state if a BPDU is received.
  B. The switch ports are prevented from going into an err-disable state if a BPDU is sent.
  C. The switch ports are prevented from going into an err-disable state if a BPDU is received and sent.
  D. The switch ports are prevented from forming a trunk.
  C. The switch ports are prevented from going into an err-disable state if a BPDU is received and sent.

• Question 438:

  What can an administrator do to simultaneously capture and trace packets in a Cisco ASA?

  A. Install a Cisco ASA virtual appliance.
  B. Use the trace option of the capture command.
  C. Use the trace option of the packet-tracer command.
  D. Install a switch with a code that supports capturing, and configure a trunk to the Cisco ASA.
  B. Use the trace option of the capture command.

• Question 439:

  An engineer is applying best practices to stop STP unauthorized changes from the uses port. Which two actions help accomplish this task? (Choose two)

  A. Enable STP Guard B. Configure RSTP
  C. Disable STP
  D. Enable BPDU Guard
  E. Enable Root Guard
  D. Enable BPDU Guard
  E. Enable Root Guard

• Question 440:

  Which Cisco ASA object group type offers the most flexibility for grouping different services together based on arbitrary protocols?

  A. network
  B. ICMP
  C. protocol
  D. TCP-UDP
  E. service
  E. service