Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 51:

  Which Cisco ASA command authenticates the Cisco ASDM client that accesses the security appliance using HTTPS with local user database?

  A. aaa authentication ssh console LOCAL
  B. aaa authentication serial console LOCAL
  C. aaa authentication telnet console LOCAL
  D. aaa authentication http console LOCAL
  D. aaa authentication http console LOCAL

• Question 52:

  Which statement about Cisco ASA NetFlow v9 (NSEL) is true?

  A. NSEL events match all traffic classes in parallel
  B. NSEL is has a time interval locked at 20 seconds and is not user configurable
  C. NSEL tracks flow-create, flow-teardown, and flow-denied events and generates appropriate NSEL data records
  D. You cannot disable syslog messages that have become redundant because of NSEL
  E. NSEL tracks the flow continuously and provides updates every 10 second
  F. NSEL provides stateless IP flow tracking that exports all record od a specific flow
  C. NSEL tracks flow-create, flow-teardown, and flow-denied events and generates appropriate NSEL data records

• Question 53:

  A network engineer must mange and configurations to a cisco networking environment solutions accomplishes this task?

  A. cisco IPS manage express and pushing configuration to the ips units
  B. cisco security 4.5 or later and pushing configuration bundles to each of the,,,,,
  C. cisco adaptive security device manager to push configuration to each of the IPS
  D. fire SIGHT manager to bundle and push configuration to the IPS units installed
  D. fire SIGHT manager to bundle and push configuration to the IPS units installed

• Question 54:

  What is the benefit of centralized ESA management?

  A. Protection against flash threats
  B. Administration of multiple autonomous systems
  C. Easier administration
  D. Virtualised e-mail partitions
  C. Easier administration

• Question 55:

  Which function does DNSSEC provide in a DNS infrastructure?

  A. It authenticates stored information.
  B. It authorizes stored information.
  C. It encrypts stored information.
  D. It logs stored security information.
  A. It authenticates stored information.

• Question 56:

  The system team recently migrated from a physical server environment that uses VMware hypervisors. The team must provide a solution inter-VM and multitenant communications within the new virtual environment. Which solution satisfies this requirement?

  A. Cisco ASA 1000v
  B. VXLAN
  C. VSG
  D. Cisco ASAv
  C. VSG

• Question 57:

  Which option describes the enhancements that SNMPv3 adds over 1 and 2 versions?

  A. Predefined events that generate message from the SNMP agent to the NMS
  B. Addition of authentication and privacy options
  C. Cleartext transmission of data between SNMP server and SNMP agent
  D. Addition of the ability to predefine events using traps
  E. Pooling of devices using GET-NEXT requests
  F. Use of the object identifier
  B. Addition of authentication and privacy options

• Question 58:

  How many servers Prime Infrastructure High Availability supports?

  A. 2
  B. 4
  C. 6
  D. 8
  A. 2

• Question 59:

  Which two option are protocol and tools are used by management plane when using cisco ASA general management plane hardening ?

  A. Unicast Reverse Path Forwarding
  B. NetFlow
  C. Routing Protocol Authentication
  D. Threat detection
  E. Syslog
  F. ICMP unreachables
  G. Cisco URL Filtering
  B. NetFlow
  E. Syslog

• Question 60:

  Which statement about the behavior of the Cisco ASA firewall is true?

  A. The Cisco ASA is not seen as a router hop to connect devices in routed mode
  B. All Cisco ASA interfaces are on different subnets in transparent mode
  C. The Cisco ASA clears the running configuration when changing firewall modes
  D. The Cisco ASA blocks ARP inspection packets in transparent mode
  C. The Cisco ASA clears the running configuration when changing firewall modes