This page was exported from Lead2pass New Updated Exam Questions [ https://www.getfreevce.com ]

Export date:Sun Dec 22 12:46:18 2024 / +0000 GMT

___________________________________________________


Title: [2017 New] Pass 300-206 Exam By Training Lead2pass New VCE And PDF Dumps (51-75)

---------------------------------------------------


2017 July Cisco Official New Released 300-206 Dumps in Lead2pass.com!  100% Free Download! 100% Pass Guaranteed!  Lead2pass updates Cisco 300-206 exam questions, adds some new changed questions from Cisco Official Exam Center. Want to know 2017 300-206 exam test points? Download the following free Lead2pass latest exam questions today! Following questions and answers are all new published by Cisco Official Exam Center: https://www.lead2pass.com/300-206.html  QUESTION 51Which three configurations are needed to enable SNMPv3 support on the Cisco ASA? (Choose three.) A.&nbsp;&nbsp;&nbsp; SNMPv3 Local EngineIDB.&nbsp;&nbsp;&nbsp; SNMPv3 Remote EngineIDC.&nbsp;&nbsp;&nbsp; SNMP UsersD.&nbsp;&nbsp;&nbsp; SNMP GroupsE.&nbsp;&nbsp;&nbsp; SNMP Community StringsF.&nbsp;&nbsp;&nbsp; SNMP HostsAnswer: CDF QUESTION 52Which two configurations are the minimum needed to enable EIGRP on the Cisco ASA appliance? (Choose two.) A.&nbsp;&nbsp;&nbsp; Enable the EIGRP routing process and specify the AS number.B.&nbsp;&nbsp;&nbsp; Define the EIGRP default-metric.C.&nbsp;&nbsp;&nbsp; Configure the EIGRP router ID.D.&nbsp;&nbsp;&nbsp; Use the neighbor command(s) to specify the EIGRP neighbors.E.&nbsp;&nbsp;&nbsp; Use the network command(s) to enable EIGRP on the Cisco ASA interface(s). Answer: AE QUESTION 53All 30 users on a single floor of a building are complaining about network slowness. After investigating the access switch, the network administrator notices that the MAC address table is full (10,000 entries) and all traffic is being flooded out of every port. Which action can the administrator take to prevent this from occurring? A.&nbsp;&nbsp;&nbsp; Configure port-security to limit the number of mac-addresses allowed on each portB.&nbsp;&nbsp;&nbsp; Upgrade the switch to one that can handle 20,000 entriesC.&nbsp;&nbsp;&nbsp; Configure private-vlans to prevent hosts from communicating with one anotherD.&nbsp;&nbsp;&nbsp; Enable storm-control to limit the traffic rateE.&nbsp;&nbsp;&nbsp; Configure a VACL to block all IP traffic except traffic to and from that subnet Answer: A QUESTION 54A network printer has a DHCP server service that cannot be disabled. How can a layer 2 switch be configured to prevent the printer from causing network issues? A.&nbsp;&nbsp;&nbsp; Remove the ip helper-addressB.&nbsp;&nbsp;&nbsp; Configure a Port-ACL to block outbound TCP port 68C.&nbsp;&nbsp;&nbsp; Configure DHCP snoopingD.&nbsp;&nbsp;&nbsp; Configure port-security Answer: C QUESTION 55A switch is being configured at a new location that uses statically assigned IP addresses. Which will ensure that ARP inspection works as expected? A.&nbsp;&nbsp;&nbsp; Configure the 'no-dhcp' keyword at the end of the ip arp inspection commandB.&nbsp;&nbsp;&nbsp; Enable static arp inspection using the command 'ip arp inspection static vlan vlan- numberC.&nbsp;&nbsp;&nbsp; Configure an arp access-list and apply it to the ip arp inspection commandD.&nbsp;&nbsp;&nbsp; Enable port security Answer: C QUESTION 56Which two voice protocols can the Cisco ASA inspect? (Choose two.) A.&nbsp;&nbsp;&nbsp; MGCPB.&nbsp;&nbsp;&nbsp; IAXC.&nbsp;&nbsp;&nbsp; SkypeD.&nbsp;&nbsp;&nbsp; CTIQBE Answer: AD QUESTION 57You have explicitly added the line deny ipv6 any log to the end of an IPv6 ACL on a router interface. Which two ICMPv6 packet types must you explicitly allow to enable traffic to traverse the interface? (Choose two.) A.&nbsp;&nbsp;&nbsp; router solicitationB.&nbsp;&nbsp;&nbsp; router advertisementC.&nbsp;&nbsp;&nbsp; neighbor solicitationD.&nbsp;&nbsp;&nbsp; neighbor advertisementE.&nbsp;&nbsp;&nbsp; redirect Answer: CD QUESTION 58Enabling what security mechanism can prevent an attacker from gaining network topology information from CDP? A.&nbsp;&nbsp;&nbsp; MACsecB.&nbsp;&nbsp;&nbsp; Flex VPNC.&nbsp;&nbsp;&nbsp; Control Plane ProtectionD.&nbsp;&nbsp;&nbsp; Dynamic Arp Inspection Answer: A QUESTION 59Which log level provides the most detail on the Cisco Web Security Appliance? A.&nbsp;&nbsp;&nbsp; DebugB.&nbsp;&nbsp;&nbsp; CriticalC.&nbsp;&nbsp;&nbsp; TraceD.&nbsp;&nbsp;&nbsp; Informational Answer: C QUESTION 60What is the lowest combination of ASA model and license providing 1 Gigabit Ethernet interfaces? A.&nbsp;&nbsp;&nbsp; ASA 5505 with failover license optionB.&nbsp;&nbsp;&nbsp; ASA 5510 Security+ license optionC.&nbsp;&nbsp;&nbsp; ASA 5520 with any license optionD.&nbsp;&nbsp;&nbsp; ASA 5540 with AnyConnect Essentials License option Answer: B QUESTION 61Which URL matches the regex statement "http"*/"www.cisco.com/"*[^E]"xe"? A.&nbsp;&nbsp;&nbsp; https://www.cisco.com/ftp/ios/tftpserver.exeB.&nbsp;&nbsp;&nbsp; https://cisco.com/ftp/ios/tftpserver.exeC.&nbsp;&nbsp;&nbsp; http:/www.cisco.com/ftp/ios/tftpserver.ExeD.&nbsp;&nbsp;&nbsp; https:/www.cisco.com/ftp/ios/tftpserver.EXE Answer: A QUESTION 62Which two statements about Cisco IOS Firewall are true? (Choose two.) A.&nbsp;&nbsp;&nbsp; It provides stateful packet inspection.B.&nbsp;&nbsp;&nbsp; It provides faster processing of packets than Cisco ASA devices provide.C.&nbsp;&nbsp;&nbsp; It provides protocol-conformance checks against traffic.D.&nbsp;&nbsp;&nbsp; It eliminates the need to secure routers and switches throughout the network.E.&nbsp;&nbsp;&nbsp; It eliminates the need to secure host machines throughout the network. Answer: AC QUESTION 63Which two VPN types can you monitor and control with Cisco Prime Security Manager? (Choose two.) A.&nbsp;&nbsp;&nbsp; AnyConnect SSLB.&nbsp;&nbsp;&nbsp; site-to-siteC.&nbsp;&nbsp;&nbsp; clientless SSLD.&nbsp;&nbsp;&nbsp; IPsec remote-access Answer: ADExplanation: http://www.cisco.com/c/en/us/td/docs/security/asacx/9-1/user/guide/b_User_Guide_for_ASA_CX_and_PRSM_9_1.pdf QUESTION 64What are three attributes that can be applied to a user account with RBAC? (Choose three.) A.&nbsp;&nbsp;&nbsp; domainB.&nbsp;&nbsp;&nbsp; passwordC.&nbsp;&nbsp;&nbsp; ACE tagD.&nbsp;&nbsp;&nbsp; user rolesE.&nbsp;&nbsp;&nbsp; VDC group tagF.&nbsp;&nbsp;&nbsp; expiry date Answer: BDF QUESTION 65Which command is used to nest objects in a pre-existing group? A.&nbsp;&nbsp;&nbsp; object-groupB.&nbsp;&nbsp;&nbsp; network group-objectC.&nbsp;&nbsp;&nbsp; object-group networkD.&nbsp;&nbsp;&nbsp; group-object Answer: D QUESTION 66Which threat-detection feature is used to keep track of suspected attackers who create connections to too many hosts or ports? A.&nbsp;&nbsp;&nbsp; complex threat detectionB.&nbsp;&nbsp;&nbsp; scanning threat detectionC.&nbsp;&nbsp;&nbsp; basic threat detectionD.&nbsp;&nbsp;&nbsp; advanced threat detection Answer: B QUESTION 67What is the default behavior of an access list on the Cisco ASA security appliance? A.&nbsp;&nbsp;&nbsp; It will permit or deny traffic based on the access-list criteria.B.&nbsp;&nbsp;&nbsp; It will permit or deny all traffic on a specified interface.C.&nbsp;&nbsp;&nbsp; An access group must be configured before the access list will take effect for traffic control.D.&nbsp;&nbsp;&nbsp; It will allow all traffic. Answer: C QUESTION 68What is the default behavior of NAT control on Cisco ASA Software Version 8.3? A.&nbsp;&nbsp;&nbsp; NAT control has been deprecated on Cisco ASA Software Version 8.3.B.&nbsp;&nbsp;&nbsp; It will prevent traffic from traversing from one enclave to the next without proper access configuration.C.&nbsp;&nbsp;&nbsp; It will allow traffic to traverse from one enclave to the next without proper access configuration.D.&nbsp;&nbsp;&nbsp; It will deny all traffic. Answer: A QUESTION 69Which three options are hardening techniques for Cisco IOS routers? (Choose three.) A.&nbsp;&nbsp;&nbsp; limiting access to infrastructure with access control listsB.&nbsp;&nbsp;&nbsp; enabling service password recoveryC.&nbsp;&nbsp;&nbsp; using SSH whenever possibleD.&nbsp;&nbsp;&nbsp; encrypting the service passwordE.&nbsp;&nbsp;&nbsp; using Telnet whenever possibleF.&nbsp;&nbsp;&nbsp; enabling DHCP snooping Answer: ACD QUESTION 70What command alters the SSL ciphers used by the Cisco Email Security Appliance for TLS sessions and HTTPS access? A.&nbsp;&nbsp;&nbsp; sslconfigB.&nbsp;&nbsp;&nbsp; sslciphersC.&nbsp;&nbsp;&nbsp; tlsconifgD.&nbsp;&nbsp;&nbsp; certconfig Answer: A QUESTION 71What is the CLI command to enable SNMPv3 on the Cisco Web Security Appliance? A.&nbsp;&nbsp;&nbsp; snmpconfigB.&nbsp;&nbsp;&nbsp; snmpenableC.&nbsp;&nbsp;&nbsp; configsnmpD.&nbsp;&nbsp;&nbsp; enablesnmp Answer: A QUESTION 72The Cisco Email Security Appliance can be managed with both local and external users of different privilege levels. What three external modes of authentication are supported? (Choose three.) A.&nbsp;&nbsp;&nbsp; LDAP authenticationB.&nbsp;&nbsp;&nbsp; RADIUS AuthenticationC.&nbsp;&nbsp;&nbsp; TACASD.&nbsp;&nbsp;&nbsp; SSH host keysE.&nbsp;&nbsp;&nbsp; Common Access Card AuthenticationF.&nbsp;&nbsp;&nbsp; RSA Single use tokens Answer: ABD QUESTION 73When a Cisco ASA is configured in multicontext mode, which command is used to change between contexts? A.&nbsp;&nbsp;&nbsp; changeto config contextB.&nbsp;&nbsp;&nbsp; changeto contextC.&nbsp;&nbsp;&nbsp; changeto/config context changeD.&nbsp;&nbsp;&nbsp; changeto/config context 2 Answer: B QUESTION 74Which statement about the Cisco Security Manager 4.4 NAT Rediscovery feature is true? A.&nbsp;&nbsp;&nbsp; It provides NAT policies to existing clients that connect from a new switch port.B.&nbsp;&nbsp;&nbsp; It can update shared policies even when the NAT server is offline.C.&nbsp;&nbsp;&nbsp; It enables NAT policy discovery as it updates shared polices.D.&nbsp;&nbsp;&nbsp; It enables NAT policy rediscovery while leaving existing shared polices unchanged. Answer: D QUESTION 75When you install a Cisco ASA AIP-SSM, which statement about the main Cisco ASDM home page is true? A.&nbsp;&nbsp;&nbsp; It is replaced by the Cisco AIP-SSM home page.B.&nbsp;&nbsp;&nbsp; It must reconnect to the NAT policies database.C.&nbsp;&nbsp;&nbsp; The administrator can manually update the page.D.&nbsp;&nbsp;&nbsp; It displays a new Intrusion Prevention panel. Answer: D Lead2pass promise that all 300-206 exam questions are the latest updated, we aim to provide latest and guaranteed questions for all certifications. You just need to be braved in trying then we will help you arrange all later things! 100% pass all exams you want or full money back! Do you want to have a try on passing 300-206? 300-206 new questions on Google Drive: https://drive.google.com/open?id=0B3Syig5i8gpDQ3hFS2lmMTdVb3c  2017 Cisco 300-206 exam dumps (All 251 Q&amp;As) from Lead2pass:  https://www.lead2pass.com/300-206.html [100% Exam Pass Guaranteed]

---------------------------------------------------


Images: 

---------------------------------------------------




---------------------------------------------------


Post date: 2017-07-11 09:10:23

Post date GMT: 2017-07-11 09:10:23

Post modified date: 2017-07-11 09:10:23

Post modified date GMT: 2017-07-11 09:10:23



____________________________________________________________________________________________


Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com