100% Success and Guarantee to Pass

2017 Latest Cisco 300-206 Dumps Exam

Practice Questions And Answers
Online Free Download

http://www.lead4pass.com/300-206.html

Vendor: Cisco
Exam Code: 300-206
Exam Name: Implementing Cisco Edge
Network Security Solutions
Version: Demo

Question No : 1
Which command configures the SNMP server group1 to enable authentication for
members of the access list east?
 100% Success and Guarantee to Pass
A. snmp-server group group1 v3 auth access east
B. snmp-server group1 v3 auth access east
C. snmp-server group group1 v3 east
D. snmp-server group1 v3 east access
Correct Answer: A

Question No : 2
Which statement about Cisco ASA multicast routing support is true?
A. The Cisco ASA appliance supports PIM dense mode, sparse mode, and
BIDIR-PIM.
B. The Cisco ASA appliance supports only stub multicast routing by forwarding
IGMP messages from multicastreceivers to the upstream multicast router.
C. The Cisco ASA appliance supports DVMRP and PIM.
D. The Cisco ASA appliance supports either stub multicast routing or PIM, but both
cannot be enabled at thesame time.
E. The Cisco ASA appliance supports only IGMP v1.
Correct Answer: D

Question No : 3
Enabling what security mechanism can prevent an attacker from gaining network
topology information from CDP via a man-in-the-middle attack?
A. MACsec
B. Flex VPN
C. Control Plane Protection
D. Dynamic Arp Inspection
Correct Answer: A
 100% Success and Guarantee to Pass
Question No : 4
On an ASA running version 9.0, which command is used to nest objects in a
pre-existing group?
A. object-group
B. network group-object
C. object-group network
D. group-object
Correct Answer: D

Question No : 5
Which two features are supported when configuring clustering of multiple Cisco
ASA appliances? (Choose two.)
A. NAT
B. dynamic routing
C. SSL remote access VPN
D. IPSec remote access VPN
Correct Answer: AB

Question No : 6
Which option is the Cisco ASA on-box graphical management solution?
A. SSH
B. ASDM
C. Console
D. CSM
Correct Answer: B
 100% Success and Guarantee to Pass
Question No : 7
Which action is needed to set up SSH on the Cisco ASA firewall?
A. Create an ACL to aloew the SSH traffic to the Cisco ASA.
B. Configure DHCP for the client that will connect via SSH.
C. Generate a crypto key
D. Specify the SSH version level as either 1 or 2.
E. Enable the HTTP server to allow authentication.
Correct Answer: C

Question No : 8
Which command is the first that you enter to check whether or not ASDM is
installed on the ASA?
A. Show ip
B. Show running-config asdm
C. Show running-config boot
D. Show version
E. Show route
Correct Answer: D

Question No : 9
Which technology can be deployed with a Cisco ASA 1000V to segregate Layer 2
access within a virtual cloud environment?
A. Cisco Nexus 1000V
B. Cisco VSG
C. WSVA
D. ESVA
 100% Success and Guarantee to Pass
Correct Answer: A

Question No : 10
What are two security features at the access port level that can help mitigate Layer
2 attacks? (Choose two.)
A. DHCP snooping
B. IP Source Guard
C. Telnet
D. Secure Shell
E. SNMP
Correct Answer: AB

Question No : 11
Which Cisco product provides a GUI-based device management tool to configure
Cisco access routers?A. Cisco ASDM
B. Cisco CP Express
C. Cisco ASA 5500
D. Cisco CP
Correct Answer: D

Question No : 12
When configured in accordance to Cisco best practices, the ip verify source
command can mitigate which two types of Layer 2 attacks? (Choose two.)
 100% Success and Guarantee to Pass
A. rogue DHCP servers
B. ARP attacks
C. DHCP starvation
D. MAC spoofing
E. CAM attacks
F. IP spoofing
Correct Answer: DF

Question No : 13
A network administrator is creating an ASA-CX administrative user account with
the following parameters:
-The user will be responsible for configuring security policies on networkdevices.
-The user needs read-write access to policies.
-The account has no more rights than necessary for the job.
What role will be assigned to the user?
A. Administrator
B. Security administrator
C. System administrator
D. Root Administrator
E. Exec administrator
Correct Answer: B

Question No : 14
Which command is used to nest objects in a pre-existing group?
 100% Success and Guarantee to Pass
A. object-group
B. network group-object
C. object-group network
D. group-object
Correct Answer: D

Question No : 15
Which action is considered a best practice for the Cisco ASA firewall?
A. Use threat detection to determine attacks
B. Disable the enable password
C. Disable console logging
D. Enable ICMP permit to monitor the Cisco ASA interfaces
E. Enable logging debug-trace to send debugs to the syslog server
Correct Answer: A

http://www.lead4pass.com/300-206.html