Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 451:

  A switch is being configured at a new location that uses statically assigned IP addresses. Which will ensure that ARP inspection works as expected?

  A. Configure the 'no-dhcp' keyword at the end of the ip arp inspection command
  B. Enable static arp inspection using the command 'ip arp inspection static vlan vlan- number
  C. Configure an arp access-list and apply it to the ip arp inspection command
  D. Enable port security
  C. Configure an arp access-list and apply it to the ip arp inspection command

• Question 452:

  Which URL matches the regex statement "http"*/"www.cisco.com/"*[^E]"xe"?

  A. https://www.cisco.com/ftp/ios/tftpserver.exe
  B. https://cisco.com/ftp/ios/tftpserver.exe
  C. http:/www.cisco.com/ftp/ios/tftpserver.Exe
  D. https:/www.cisco.com/ftp/ios/tftpserver.EXE
  A. https://www.cisco.com/ftp/ios/tftpserver.exe

• Question 453:

  What are two security features at the access port level that can help mitigate Layer 2 attacks? (Choose two.)

  A. DHCP snooping
  B. IP Source Guard
  C. Telnet
  D. Secure Shell
  E. SNMP
  A. DHCP snooping
  B. IP Source Guard

• Question 454:

  When you configure a Cisco firewall in multiple context mode, where do you allocate interfaces?

  A. in the system execution space
  B. in the admin context
  C. in a user-defined context
  D. in the global configuration
  A. in the system execution space

• Question 455:

  Refer to the exhibit. What is the default behavior expected upon running the ip dhcp snooping vlan 10 command?

  

  A. All of the switch ports in VLAN 10 are trusted.
  B. All of the switch ports in VLAN 10 are untrusted.
  C. All of the ports that are not placed in VLAN 10 are untrusted.
  D. The user can obtain an IP address via DHCP.
  A. All of the switch ports in VLAN 10 are trusted.

• Question 456:

  In one custom dynamic application, the inside client connects to an outside server using TCP port 4444 and negotiates return client traffic in the port range of 5000 to 5500. The server then starts streaming UDP data to the client on the negotiated port in the specified range. Which Cisco ASA feature or command supports this custom dynamic application?

  A. TCP normalizer
  B. TCP intercept
  C. ip verify command
  D. established command
  E. tcp-map and tcp-options commands
  D. established command

• Question 457:

  Drag and Drop

  Drag and drop the syslog message examples on the left onto the message security level on the right.

  Select and Place:

  

  

• Question 458:

  A firewall administrator must write a short script for network operations that will login to all cisco ASA firewalls and check that the current running version is compliant with company policy. The administrator must first configure a restricted local

  username on each of the the Cisco ASA firewalls so that the current running version can be validated.

  Which configuration command provides the least access in order to perform this function?

  A. username versionuser password cisco
  B. username versionuser password cisco privilege 0
  C. username versionuser password cisco privilege 2
  D. username versionuser password cisco privilege 15
  B. username versionuser password cisco privilege 0

• Question 459:

  Which statement about Cisco ASA botnet filtering is true?

  A. BTF takes the MD5 value and compares it against the dynamic database
  B. BTF checks if the domain name in a DNS reply matches a name in the BTF database
  C. BTF can rate-limit traffic to known botnet addresses
  D. BTF redirects DNS queries to a BTF server for further analysis
  B. BTF checks if the domain name in a DNS reply matches a name in the BTF database

• Question 460:

  Drag and Drop

  Drag and drop the steps on the left into the correct order of Cisco Security Manager rules when using inheritance on the right.

  Select and Place: