Cisco 300-206 Online Practice Questions and Exam Preparation

Cisco 300-206 Online Questions & Answers

• Question 71:

  Which configuration on a switch would be unsuccessful in preventing a DHCP starvation attack?

  A. DHCP snooping
  B. Port security
  C. Source Guard
  D. Rate Limiting
  D. Rate Limiting

• Question 72:

  In a Cisco ASAv failover deployment, which interface is preconfigured as the failover interface?

  A. GigabitEthernet0/2
  B. GigabitEthernet0/4
  C. GigabitEthernet0/6
  D. GigabitEthernet0/8
  D. GigabitEthernet0/8

• Question 73:

  Refer to the exhibit. Which reason explains why the Cisco ASA appliance cannot establish an authenticated NTP session to the inside 192.168.1.1 NTP server?

  ciscoasa(config)#ntp authenticateciscoasa(config)#ntp authentication-key 2 md5 secretciscoasa(config)#ntp trusted-key 2ciscoasa(config)#ntp server 192.168.1.1

  A. The ntp server 192.168.1.1 command is incomplete.
  B. The ntp source inside command is missing.
  C. The ntp access-group peer command and the ACL to permit 192.168.1.1 are missing.
  D. The trusted-key number should be 1 not 2.
  A. The ntp server 192.168.1.1 command is incomplete.

• Question 74:

  A network engineer must manage and push configurations to a Cisco networking environment, in which 10 Cisco ASA with IPS modules reside. Which solution accomplishes this task?

  A. Cisco Adaptive Security Device Manager to push configurations to each of the IPS units
  B. FireSIGHT manager to bundle and push configurations to the IPS units installed on an SSD within the Cisco ASA 5500 Series ASA
  C. Cisco Security Manager 4.5 or later and pushing configuration bundles to each of the IPS units
  D. Cisco IPS Manager Express and pushing configurations to the IPS units
  B. FireSIGHT manager to bundle and push configurations to the IPS units installed on an SSD within the Cisco ASA 5500 Series ASA

• Question 75:

  Which two option are main challenges for public cloud data center?

  A. deployment cost
  B. tenant isolation
  C. disaster recovery
  D. system scalability
  E. network visibility
  B. tenant isolation
  E. network visibility

• Question 76:

  What is the lowest combination of ASA model and license providing 1 Gigabit Ethernet interfaces?

  A. ASA 5505 with failover license option
  B. ASA 5510 Security+ license option
  C. ASA 5520 with any license option
  D. ASA 5540 with AnyConnect Essentials License option
  B. ASA 5510 Security+ license option

• Question 77:

  an engineer is applying best practices to stop vlan hopping attacks?

  A. disable DTP on user facing ports
  B. configure DHCP snooping on all switches
  C. use the vlan dot 1Q tag native command
  D. disable cisco discovaryprotocol on all switches
  E. configure IP on source Guard on all switches
  A. disable DTP on user facing ports
  C. use the vlan dot 1Q tag native command

• Question 78:

  On the Cisco ASA, tcp-map can be applied to a traffic class using which MPF CLI configuration command?

  A. inspect
  B. sysopt connection
  C. tcp-options
  D. parameters
  E. set connection advanced-options
  E. set connection advanced-options

• Question 79:

  Which statement about Cisco Security Manager form factors is true?

  A. Cisco Security Manager Professional and Cisco Security Manager UCS Server Bundles support FWSMs.
  B. Cisco Security Manager Standard and Cisco Security Manager Professional support FWSMs.
  C. Only Cisco Security Manager Professional supports FWSMs.
  D. Only Cisco Security Manager Standard supports FWSMs.
  A. Cisco Security Manager Professional and Cisco Security Manager UCS Server Bundles support FWSMs.

• Question 80:

  Refer to the exhibit. Which statement about this access list is true?

  

  A. This access list does not work without 6to4 NAT
  B. IPv6 to IPv4 traffic permitted on the Cisco ASA by default
  C. This access list is valid and works without additional configuration
  D. This access list is not valid and does not work at all
  E. We can pass only IPv6 to IPv6 and IPv4 to IPv4 traffic
  A. This access list does not work without 6to4 NAT