300-206 Premium Bundle

300-206 Premium Bundle

Implementing Cisco Edge Network Security Solutions Certification Exam

4.5 
(10125 ratings)
0 QuestionsPractice Tests
0 PDFPrint version
November 23, 2024Last update

Cisco 300-206 Free Practice Questions

Q1. Prior to a software upgrade, which Cisco Prime Infrastructure feature determines if 

the devices being upgraded have sufficient RAM to support te new software ? 

A. Software Upgrade Report 

B. Image Management Report 

C. Upgrade Analysis Report 

D. Image Analysis Report 

Answer:

Q2. Which technology provides forwarding-plane abstraction to support Layer 2 to Layer 7 network services in Cisco Nexus 1000V? 

A. Virtual Service Node 

B. Virtual Service Gateway 

C. Virtual Service Data Path 

D. Virtual Service Agent 

Answer:

Q3. Which security operations management best practice should be followed to enable appropriate network access for administrators? 

A. Provide full network access from dedicated network administration systems 

B. Configure the same management account on every network device 

C. Dedicate a separate physical or logical plane for management traffic 

D. Configure switches as terminal servers for secure device access 

Answer:

Q4. To which port does a firewall send secure logging messages? 

A. TCP/1500 

B. UDP/1500 

C. TCP/500 

D. UDP/500 

Answer:

Q5. Which option describes the purpose of the input parameter when you use the packet-tracer command on a Cisco device? 

A. to provide detailed packet-trace information 

B. to specify the source interface for the packet trace 

C. to display the trace capture in XML format 

D. to specify the protocol type for the packet trace 

Answer:

Q6. Which ASA feature is used to keep track of suspected attackers who create connections to too many hosts or ports? 

A. complex threat detection 

B. scanning threat detection 

C. basic threat detection 

D. advanced threat detection 

Answer:

Q7. What are three attributes that can be applied to a user account with RBAC? (Choose three.) 

A. domain 

B. password 

C. ACE tag 

D. user roles 

E. VDC group tag 

F. expiry date 

Answer: B,D,F 

Q8. Which Cisco prime Infrastructure features allows you to assign templates to a group of wireless LAN controllers with similar configuration requirements? 

A. Lightweight access point configuration template 

B. Composite template 

C. Controller configuration group 

D. Shared policy object 

Answer:

Q9. Which VTP mode supports private VLANs on a switch? 

A. transparent 

B. server 

C. client 

D. off 

Answer:

Q10. Refer to the exhibit. 

This command is used to configure the SNMP server on a Cisco router. Which option is the encryption password for the SNMP server? 

A. Sha 

B. Snmp 

C. Group-1 

D. Snmpv3 

Answer:

Q11. Which four are IPv6 First Hop Security technologies? (Choose four.) 

A. Send 

B. Dynamic ARP Inspection 

C. Router Advertisement Guard 

D. Neighbor Discovery Inspection 

E. Traffic Storm Control 

F. Port Security 

G. DHCPv6 Guard 

Answer: A,C,D,G 

Q12. Which option is the default logging buffer size In memory of the Cisco ASA adaptive security appliance? 

A. 8KB 

B. 32KB 

C. 2KB 

D. 16KB 

E. 4KB 

Answer:

Explanation: 

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_gen eral_c onfig/ monitor_syslog.html 

Q13. For which management session types does ASDM allow a maximum simultaneous connection limit to be set? 

A. ASDM, Telnet, SSH 

B. ASDM, Telnet, SSH, console 

C. ASDM, Telnet, SSH, VTY 

D. ASDM, Telnet, SSH, other 

Answer:

Q14. Which three options are default settings for NTP parameters on a Cisco ASA? (Choose three.) 

A. NTP authentication is enabled. 

B. NTP authentication is disabled. 

C. NTP logging is enabled. 

D. NTP logging is disabled. 

E. NTP traffic is not restricted. 

F. NTP traffic is restricted. 

Answer: B,D,E 

Q15. Which feature is a limitation of a Cisco ASA 5555-X running 8.4.5 version with multiple contexts? 

A. Deep packet inspection 

B. Packet tracer 

C. IPsec 

D. Manual/auto NAT 

E. Multipolicy packet capture 

Answer:

START 300-206 EXAM