Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 441:

  Which two TCP ports must be open on the Cisco Security Manager server to allow the server to communicate with the Cisco Security Manager client? (Choose two.)

  A. 1741
  B. 443
  C. 80
  D. 1740
  E. 8080
  A. 1741
  B. 443

• Question 442:

  Which Cisco product provides a GUI-based device management tool to configure Cisco access routers?

  A. Cisco ASDM
  B. Cisco CP Express
  C. Cisco ASA 5500
  D. Cisco CP
  D. Cisco CP

• Question 443:

  Which kind of Layer 2 attack targets the STP root bridge election process and allows an attacker to control the flow of traffic?

  A. man-in-the-middle
  B. denial of service
  C. distributed denial of service
  D. CAM overflow
  A. man-in-the-middle

• Question 444:

  Which set of commands creates a message list that includes all severity 2 (critical) messages on a Cisco security device?

  A. logging list critical_messages level 2 console logging critical_messages
  B. logging list critical_messages level 2 logging console critical_messages
  C. logging list critical_messages level 2 logging console enable critical_messages
  D. logging list enable critical_messages level 2 console logging critical_messages
  B. logging list critical_messages level 2 logging console critical_messages

• Question 445:

  What are two potential benefits of a Cisco ASAv? (Choose two.)

  A. unlimited number of interfaces
  B. multi device management by using Cisco ASDM
  C. ease of integration within cloud environments
  D. easy deployment in multitenant environments
  E. deeper packet inspection than traditional ASAs
  C. ease of integration within cloud environments
  D. easy deployment in multitenant environments

• Question 446:

  An engineer is adding devices to Cisco Prime Infrastructure using Discovery. Which protocol must be used when RTDM is processed?

  A. LLDP
  B. ARP
  C. OSPF
  D. BGP
  B. ARP

• Question 447:

  When configuring packet-tracer command from CLI, what is the first option that you set?

  A. source IP address
  B. destination IP address
  C. interface
  D. protocol (ip, tcp, udp)
  C. interface

• Question 448:

  What is the primary purpose of stateful pattern recognition in Cisco IPS networks?

  A. mitigating man-in-the-middle attacks
  B. using multipacket inspection across all protocols to identify vulnerability-based attacks and to thwart attacks that hide within a data stream
  C. detecting and preventing MAC address spoofing in switched environments
  D. identifying Layer 2 ARP attacks
  B. using multipacket inspection across all protocols to identify vulnerability-based attacks and to thwart attacks that hide within a data stream

• Question 449:

  You are a security engineer at a large multinational retailer. Your Chief Information Officer recently attended a security conference and has asked you to secure the network infrastructure from VLAN hopping. Which statement describes how VLAN hopping can be avoided?

  A. There is no such thing as VLAN hopping because VLANs are completely isolated.
  B. VLAN hopping can be avoided by using IEEE 802.1X to dynamically assign the access VLAN to all endpoints and setting the default access VLAN to an unused VLAN ID.
  C. VLAN hopping is avoided by configuring the native (untagged) VLAN on both sides of an ISL trunk to an unused VLAN ID.
  D. VLAN hopping is avoided by configuring the native (untagged) VLAN on both sides of an IEEE 802.1Q trunk to an unused VLAN ID.
  D. VLAN hopping is avoided by configuring the native (untagged) VLAN on both sides of an IEEE 802.1Q trunk to an unused VLAN ID.

• Question 450:

  Which two configurations are the minimum needed to enable EIGRP on the Cisco ASA appliance? (Choose two.)

  A. Enable the EIGRP routing process and specify the AS number.
  B. Define the EIGRP default-metric.
  C. Configure the EIGRP router ID.
  D. Use the neighbor command(s) to specify the EIGRP neighbors.
  E. Use the network command(s) to enable EIGRP on the Cisco ASA interface(s).
  A. Enable the EIGRP routing process and specify the AS number.
  E. Use the network command(s) to enable EIGRP on the Cisco ASA interface(s).