Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 41:

  Which is the minimum RSA crypto key generate for SSH2?

  A. 512
  B. 768
  C. 1024
  D. 2048
  B. 768

• Question 42:

  Which are the most secure authentication and encryption options? (Choose two)

  A. DES
  B. 3DES
  C. AES
  D. MD5
  E. SHA
  C. AES
  E. SHA

• Question 43:

  Where to apply security policies on Nexus1000V for group of VMs instead of applying it directly on interface?

  A. port group
  B. port profile
  C. security group
  D. security profile
  B. port profile

• Question 44:

  Which two parameters must be configured before you enable SCP on a router? (Choose two.)

  A. SSH
  B. authorization
  C. ACLs
  D. NTP
  E. TACACS+
  A. SSH
  B. authorization

• Question 45:

  When a Cisco ASA is configured in multicontext mode, which command is used to change between contexts?

  A. changeto config context
  B. changeto context
  C. changeto/config context change
  D. changeto/config context 2
  B. changeto context

• Question 46:

  For which purpose is the Cisco ASA CLI command aaa authentication match used?

  A. Enable authentication for SSH and Telnet connections to the Cisco ASA appliance.
  B. Enable authentication for console connections to the Cisco ASA appliance.
  C. Enable authentication for connections through the Cisco ASA appliance.
  D. Enable authentication for IPsec VPN connections to the Cisco ASA appliance.
  E. Enable authentication for SSL VPN connections to the Cisco ASA appliance.
  F. Enable authentication for Cisco ASDM connections to the Cisco ASA appliance.
  C. Enable authentication for connections through the Cisco ASA appliance.

• Question 47:

  Which action is needed to set up SSH on the Cisco ASA firewall?

  A. Create an ACL to aloew the SSH traffic to the Cisco ASA.
  B. Configure DHCP for the client that will connect via SSH.
  C. Generate a crypto key
  D. Specify the SSH version level as either 1 or 2.
  E. Enable the HTTP server to allow authentication.
  C. Generate a crypto key

• Question 48:

  Drag and Drop Syslog severity levels

  Select and Place:

  

  

• Question 49:

  At which layer does Dynamic ARP Inspection validate packets?

  A. Layer 2
  B. Layer 3
  C. Layer 4
  D. Layer 7
  A. Layer 2

• Question 50:

  The Cisco Email Security Appliance can be managed with both local and external users of different privilege levels. What three external modes of authentication are supported? (Choose three.)

  A. LDAP authentication
  B. RADIUS Authentication
  C. TACAS D. SSH host keys
  E. Common Access Card Authentication
  F. RSA Single use tokens
  A. LDAP authentication
  B. RADIUS Authentication