Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 61:

  Which device can be managed by the Cisco Prime Security Manager?

  A. ASA CX
  B. ISR G2
  C. Nexus
  D. UCM
  A. ASA CX

• Question 62:

  What mean following command arp outside 10.1.1.1 0009.xxxx.2100?

  A. create static arp entry
  B. create virtual arp entry
  C. It manually assign host to access outside
  A. create static arp entry

• Question 63:

  Refer to the exhibit.

  

  Which two verification commands do you run on the perimeter firewall to confirm that packets reach the firewall?

  A. ASA-Per show capture capin
  B. ASA-Per# capture capin interface inside match tcp 10.10.1.100.172.16.31.8 eq www
  C. ASA-per# packet tracer input tcp 10.10.1100.48000. 172.16.31.8 www
  D. ASA-per packet-tracer input outside tcp 10.10.10.1.100. 49000.172.16.31.8 www
  C. ASA-per# packet tracer input tcp 10.10.1100.48000. 172.16.31.8 www
  D. ASA-per packet-tracer input outside tcp 10.10.10.1.100. 49000.172.16.31.8 www

• Question 64:

  If a switch port goes directly into a blocked state only when a superior BPDU is received, what mechanism must be in use?

  A. STP bpdu guard
  B. STP root guard
  C. SPT bpdu filter
  B. STP root guard

• Question 65:

  What is the best practice about storm control - where to implement?

  A. PortChannel
  B. interfaces of that Po
  A. PortChannel

• Question 66:

  Which action can be taken as a preventive measure against VLAN hopping attacks?

  A. Configure an uplink to another switch as access port
  B. Set an unused VLAN as native VLAN on a trunk port
  C. Limit number of MAC addresses on a trunk port
  D. Configure port security on all switch ports
  B. Set an unused VLAN as native VLAN on a trunk port

• Question 67:

  Which statement about the Cisco Security Manager 4.4 NAT Rediscovery feature is true?

  A. It provides NAT policies to existing clients that connect from a new switch port.
  B. It can update shared policies even when the NAT server is offline.
  C. It enables NAT policy discovery as it updates shared polices.
  D. It enables NAT policy rediscovery while leaving existing shared polices unchanged.
  D. It enables NAT policy rediscovery while leaving existing shared polices unchanged.

• Question 68:

  Which Layer 2 security feature validates ARP packets?

  A. DAI
  B. DHCP server
  C. BPDU guard
  D. BPDU filtering
  A. DAI

• Question 69:

  What is the CLI command to enable SNMPv3 on the Cisco Web Security Appliance?

  A. snmpconfig
  B. snmpenable
  C. configsnmp
  D. enablesnmp
  A. snmpconfig

• Question 70:

  Which two router commands enable NetFlow on an interface? (Choose two.)

  A. ip flow ingress
  B. ip flow egress
  C. ip route-cache flow infer-fields
  D. ip flow ingress infer-fields
  E. ip flow-export version 9
  A. ip flow ingress
  B. ip flow egress