Cisco 300-206 Dumps Questions 2021

NEW QUESTION 1
Which statement about the behavior of the Cisco ASA firewall is true?

• A. The Cisco ASA is not seen as a router hop to connect devices in routed mode
• B. All Cisco ASA interfaces are on different subnets in transparent mode
• C. The Cisco ASA clears the running configuration when changing firewall modes
• D. The Cisco ASA blocks ARP inspection packets in transparent mode

Answer: C

NEW QUESTION 2
Which addresses are considered "ambiguous addresses" and are put on the greylist by the Cisco ASA botnet traffic filter feature?

• A. addresses that are unknown
• B. addresses that are on the greylist identified by the dynamic database
• C. addresses that are blacklisted by the dynamic database but also are identified by the static whitelist
• D. addresses that are associated with multiple domain names, but not all of these domain names are on the blacklist

Answer: D

NEW QUESTION 3
What are three features of the Cisco ASA 1000V? (Choose three.)

• A. cloning the Cisco ASA 1000V
• B. dynamic routing
• C. the Cisco VNMC policy agent
• D. IPv6
• E. active/standby failover
• F. QoS

Answer: ACE

NEW QUESTION 4
What are two reasons to implement Cisco IOS MPLS Bandwidth-Assured Layer 2 Services? (Choose two.)

• A. guaranteed bandwidth and peak rates as well as low cycle periods, regardless of which systems access the device
• B. increased resiliency through MPLS FRR for AToM circuits and better bandwidth utilization through MPLS TE
• C. enabled services over an IP/MPLS infrastructure, for enhanced MPLS Layer 2 functionality
• D. provided complete proactive protection against frame and device spoofing

Answer: BC

NEW QUESTION 5
Which URL matches the regex statement "http"*/"www.cisco.com/"*[^E]"xe"?

• A. https://www.cisco.com/ftp/ios/tftpserver.exe
• B. https://cisco.com/ftp/ios/tftpserver.exe
• C. http:/www.cisco.com/ftp/ios/tftpserver.Exe
• D. https:/www.cisco.com/ftp/ios/tftpserver.EXE

Answer: A

NEW QUESTION 6
Which three statements about transparent firewall are true? ( Choose three)

• A. Transparent firewall works at Layer 2
• B. Both interfaces must be configured with private IP Addresses
• C. It can have only a management IP address
• D. It does not support dynamic routing protocols
• E. It only support PAT

Answer: ACD

NEW QUESTION 7
A network engineer is troubleshooting and configures the ASA logging level to debugging. The
logging-buffer is dominated by %ASA-6-305009 log messages. Which command suppresses those syslog messages while maintaining ability to troubleshoot?

• A. no logging buffered 305009
• B. message 305009 disable
• C. no message 305009 logging
• D. no logging message 305009

Answer: D

NEW QUESTION 8
When it is configured in accordance to Cisco best practices, the switchport port-security maximum
command can mitigate which two types of Layer 2 attacks? (Choose two.)

• A. rogue DHCP servers
• B. ARP attacks
• C. DHCP starvation
• D. MAC spoofing
• E. CAM attacks
• F. IP spoofing

Answer: CE

NEW QUESTION 9


An SNMP host is an IP address to which SNMP notifications and traps are sent. To configure SNMFV3 hosts, which option must you configure in addition to the target IP address?

• A. the Cisco ASA as a DHCP server, so the SNMFV3 host can obtain an IP address
• B. a username, because traps are only sent to a configured user
• C. SSH, so the user can connect to the Cisco ASA
• D. the Cisco ASA with a dedicated interface only for SNMP, to process the SNMP host traffic.

Answer: B

Explanation: The username can be seen here on the ASDM simulator screen shot:

NEW QUESTION 10
Which option is a Cisco best practice when configuring traffic storm control?

• A. Configure 100 percent level to suppress all traffic.
• B. Configure on the port channel interface of an EtherChannel.
• C. Configure traffic storm control on ports that are members of an EtherChannel.
• D. Configure additional capacity as port speed increase.

Answer: B

NEW QUESTION 11
What are three ways to add devices in Cisco Prime Infrastructure? (Choose three.)

• A. Use an automated process.
• B. Import devices from a CSV file.
• C. Add devices manually.
• D. Use RADIUS.
• E. Use the Access Control Server.
• F. Use Cisco Security Manager.

Answer: ABC

NEW QUESTION 12
Which function does DNSSEC provide in a DNS infrastructure?

• A. It authenticates stored information.
• B. It authorizes stored information.
• C. It encrypts stored information.
• D. It logs stored security information.

Answer: A

NEW QUESTION 13
Refer to the exhibit.

To protect Host A and Host B from communicating with each other, which type of PVLAN port should be used for each host?

• A. Host A on a promiscuous port and Host B on a community port
• B. Host A on a community port and Host B on a promiscuous port
• C. Host A on an isolated port and Host B on a promiscuous port
• D. Host A on a promiscuous port and Host B on a promiscuous port
• E. Host A on an isolated port and host B on an isolated port
• F. Host A on a community port and Host B on a community port

Answer: E

NEW QUESTION 14
Which statement describes a unique feature of Cisco NetFlow Secure Event Logging for Cisco ASAs?

• A. Multiple NetFlow collectors and NetFlow exporters are supported.
• B. Secure NetFlow connections are optimized for Cisco Prime Infrastructure.
• C. Flow-create events are delayed, which reduce overall traffic.
• D. Advanced NetFlow v9 templates and legacy v5 formatting are supported.

Answer: C

NEW QUESTION 15
What can you do to enable inter-interface firewall communication for traffic that flows between two
interfaces of the same security level?

• A. Run the command same-security-traffic permit inter-interface globally.
• B. Run the command same-security-traffic permit intra-interface globally.
• C. Configure both interfaces to have the same security level.
• D. Run the command same-security-traffic permit inter-interface on the interface with the highest security level.

Answer: A

NEW QUESTION 16
Which option is a valid action for a port security violation ?

• A. Restrict
• B. Reject
• C. Disable
• D. Reset

Answer: A

NEW QUESTION 17
Which Layer 2 security feature prevents traffic on a LAN from being disrupted by a broadcast,multicat, or unicast storm on one physical interface?

• A. Bridge protocol Data Unit Guard
• B. Storm Control
• C. Embedded event monitoring
• D. Access control lists

Answer: B

NEW QUESTION 18
Which statement about the Cisco ASA configuration is true?

• A. All input traffic on the inside interface is denied by the global ACL.
• B. All input and output traffic on the outside interface is denied by the global ACL.
• C. ICMP echo-request traffic is permitted from the inside to the outside, and ICMP echo-reply will be permitted from the outside back to inside.
• D. HTTP inspection is enabled in the global policy.
• E. Traffic between two hosts connected to the same interface is permitted.

Answer: B