Cisco 300-206 Free Practice Questions 2021
Our pass rate is high to 98.9% and the similarity percentage between our 300 206 senss and real exam is 90% based on our seven-year educating experience. Do you want achievements in the Cisco 300-206 exam in just one try? I am currently studying for the 300 206 senss. Latest 300 206 senss, Try Cisco 300-206 Brain Dumps First.
Check 300-206 free dumps before getting the full version:
NEW QUESTION 1
Which statement about Dynamic ARP Inspection is true ?
- A. In a typical network, you make all ports as trusted expect for the ports connection to switches , which areuntrusted
- B. DAI associates a trust state with each switch
- C. DAI determines the validity of an ARP packet based on valid IP to MAC address binding from the DHCPsnooping database
- D. DAI intercepts all ARP requests and responses on trusted ports only
- E. DAI cannot drop invalid ARP packets
Answer: C
NEW QUESTION 2
A hacker is sniffing network traffic from a Cisco Catalyst switch on a company network. Which three pieces of information can be obtained from intercepted Cisco Discovery Protocol traffic? (Choose three.)
- A. routing protocol
- B. encapsulation type
- C. bridge ID
- D. hardware platform
- E. VTP domain
- F. interface MAC address
Answer: DEF
NEW QUESTION 3
What is the primary purpose of stateful pattern recognition in Cisco IPS networks?
- A. mitigating man-in-the-middle attacks
- B. using multi packet inspection across all protocols to identify vulnerability-based attacks and to thwart attacks that hide within a data stream
- C. detecting and preventing MAC address spoofing in switched environments
- D. identifying Layer 2 ARP attacks
Answer: B
NEW QUESTION 4
Which two option are main challenges for public cloud data center?
- A. deployment cost
- B. tenant isolation
- C. disaster recovery
- D. system scalability
- E. network visibility
Answer: BE
NEW QUESTION 5
When a Cisco ASA is configured in multiple context mode, within which configuration are the interfaces allocated to the security contexts?
- A. each security context
- B. system configuration
- C. admin context (context with the "admin" role)
- D. context startup configuration file (.cfg file)
Answer: B
NEW QUESTION 6
A network engineer is asked to configure NetFlow to sample one of every 100 packets on a router's
fa0/0 interface. Which configuration enables sampling, assuming that NetFlow is already configured and running on the router's fa0/0 interface?
- A. flow-sampler-map flow1mode random one-out-of 100 interface fas0/0 flow-sampler flow1
- B. flow monitor flow1mode random one-out-of 100 interface fas0/0 ip flow monitor flow1
- C. flow-sampler-map flow1one-out-of 100 interface fas0/0 flow-sampler flow1
- D. ip flow-export source fas0/0 one-out-of 100
Answer: A
NEW QUESTION 7
Which action can be taken as a preventive measure against VLAN hopping attacks?
- A. Configure an uplink to another switch as access port
- B. Set an unused VLAN as native VLAN on a trunk port
- C. Limit number of MAC addresses on a trunk port
- D. Configure port security on all switch ports
Answer: B
NEW QUESTION 8
In a Cisco ASAv failover deployment, which interface is preconfigured as the failover interface?
- A. GigabitEthernet0/2
- B. GigabitEthernet0/4
- C. GigabitEthernet0/6
- D. GigabitEthernet0/8
Answer: D
NEW QUESTION 9
Which benefit of using centralized management to manage a Cisco IronPort ESA is true?
- A. It reduces licensing cost
- B. It requires no initial setup
- C. It requires a light client on managed devices
- D. It reduces administration time
Answer: D
NEW QUESTION 10
What are two security features at the access port level that can help mitigate Layer 2 attacks? (Choose two.)
- A. DHCP snooping
- B. IP Source Guard
- C. Telnet
- D. Secure Shell
- E. SNMP
Answer: AB
NEW QUESTION 11
You must restrict the interface on which management traffic can be received by the routers on your network.
Which feature do you enable?
- A. MPP
- B. extended ACL on all of the interfaces
- C. CPP with a port filter
- D. AAA
Answer: A
NEW QUESTION 12
When a Cisco ASA is configured in multicontext mode, which command is used to change between
contexts?
- A. changeto config context
- B. changeto context
- C. changeto/config context change
- D. changeto/config context 2
Answer: B
NEW QUESTION 13
Refer to the exhibit.
Which statement about this access list is true?
- A. This access list does not work without 6to4 NAT
- B. IPv6 to IPv4 traffic permitted on the Cisco ASA by default
- C. This access list is valid and works without additional configuration
- D. This access list is not valid and does not work at all
- E. We can pass only IPv6 to IPv6 and IPv4 to IPv4 traffic
Answer: A
Explanation:
ASA 9.0(1) code introduced the Unified ACL for IPv4 and IPv6. ACLs now support IPv4 and IPv6 addresses. You can even specify a mix of IPv4 and IPv6 addresses for the source and destination. The any keyword was changed to represent IPv4 and IPv6 traffic. The any4 and any6 keywords were added to represent IPv4-only and IPv6-only traffic, respectively. The IPv6-specific ACLs are deprecated. Existing IPv6 ACLs are migrated to extended ACLs.
NEW QUESTION 14
Answer:
Explanation: 1) Click on Service Policy Rules, then Edit the default inspection rule.
2) Click on Rule Actions, then enable HTTP as shown here:
3) Click on Configure, then add as shown here:
4) Create the new map in ASDM like shown:
5) Edit the policy as shown:
6) Hit OK
NEW QUESTION 15
Which URL downloads a copy of packet-capture named "security" residing on a Cisco ASA adaptive security appliance with IP 10.10.100.11?
- A. https://10.10.10.11/security .pcap/download
- B. https://10.10.10.11/asa/security/pcap
- C. https://10.10.10.11/capture/security.pcap
- D. https://10.10.10.11/capture/security/pcap
Answer: D
NEW QUESTION 16
When you enable IP source Guard on private VLAN ports, which additional action must you take for IP Source Guard to be effective?
- A. Enable DHCP snooping on the isolated VLAN
- B. Enable BPDU guard on the isolated VLAN.
- C. Enable BPDU guard on the primary VLAN.
- D. Enable DHCP snooping on the primary VLAN.
Answer: D
NEW QUESTION 17
Which technology can be deployed with a Cisco ASA 1000V to segregate Layer 2 access within a virtual cloud environment?
- A. Cisco Nexus 1000V
- B. Cisco VSG
- C. WSVA
- D. ESVA
Answer: A
NEW QUESTION 18
What can an administrator do to simultaneously capture and trace packets in a Cisco ASA?
- A. Install a Cisco ASA virtual appliance.
- B. Use the trace option of the capture command.
- C. Use the trace option of the packet-tracer command.
- D. Install a switch with a code that supports capturing, and configure a trunk to the Cisco ASA.
Answer: B
Thanks for reading the newest 300-206 exam dumps! We recommend you to try the PREMIUM 2passeasy 300-206 dumps in VCE and PDF here: https://www.2passeasy.com/dumps/300-206/ (343 Q&As Dumps)