Implementing Cisco Edge Network Security · PDF fileImplementing Cisco Edge Network Security Solutions ... maximum command can mitigate which two types of Layer 2 attacks? ... the

s@lm@n

Cisco Exam 300-206

Implementing Cisco Edge Network Security Solutions

Version: 11.0

[ Total Questions: 222 ]

Download 2017 EP 300-206 Dump PDF and VCEhttp://www.ensurepass.com/300-206.html

http://www.ensurepass.com/300-206.html

Which URL downloads a copy of packet-capture named "security" residing on a Cisco ASAadaptive security appliance with IP 10.10.100.11? A. https://10.10.10.11/security .pcap/download B. https://10.10.10.11/asa/security/pcap C. https://10.10.10.11/capture/security.pcap D. https://10.10.10.11/capture/security/pcap

Answer: D

If you encounter problems logging in to the Cisco Security Manager 4.4 web server or clientor backing up its databases, which account has most likely been improperly modified? A. admin (the default administrator account) B. casuser (the default service account) C. guest (the default guest account) D. user (the default user account)

Answer: B

Which statement about Cisco Security Manager form factors is true? A. Cisco Security Manager Professional and Cisco Security Manager UCS Server Bundlessupport FWSMs. B. Cisco Security Manager Standard and Cisco Security Manager Professional supportFWSMs. C. Only Cisco Security Manager Professional supports FWSMs. D. Only Cisco Security Manager Standard supports FWSMs.

Answer: A

Question No : 1

Question No : 2

Question No : 3

Question No : 4

2

Which command displays syslog messages on the Cisco ASA console as they occur? A. Console logging <level> B. Logging console <level> C. Logging trap <level> D. E. Logging monitor <level>

Answer: B

What is the maximum jumbo frame size for IPS standalone appliances with 1G and 10G

A. 1024 bytes B. 1518 bytes C. 2156 bytes D. 9216 bytes

Answer: D

Where on a firewall does an administrator assign interfaces to contexts? A. in the system execution space B. C. D.

Answer: A

Which two features are supported when configuring clustering of multiple Cisco ASAappliances? (Choose two.) A. NAT

Question No : 5

Question No : 6

Question No : 7

3

B. dynamic routing C. SSL remote access VPN D. IPSec remote access VPN

Answer: A,B

Which information is NOT replicated to the secondary Cisco ASA adaptive securityappliance in an active/ standby configuration with stateful failover links ? A. B. C. D. Routing tables

Answer: B

What are three features of the Cisco ASA 1000V? (Choose three.) A. cloning the Cisco ASA 1000V B. dynamic routing C. the Cisco VNMC policy agent D. IPv6 E. active/standby failover F. QoS

Answer: A,C,E

Which threat-detection feature is used to keep track of suspected attackers who createconnections to too many hosts or ports? A. complex threat detection B. scanning threat detection C.

Question No : 8

Question No : 9

Question No : 10

4

D.

Answer: B

What command alters the SSL ciphers used by the Cisco Email Security Appliance for TLS

A. sslconfig B. sslciphers C. tlsconifg D. certconfig

Answer: A

When it is configured in accordance to Cisco best practices, the switchport port-securitymaximum command can mitigate which two types of Layer 2 attacks? (Choose two.) A. rogue DHCP servers B. C. D. MAC spoofing E. F. IP spoofing

Answer: C,E

How many bridge groups are supported on a firewall that operate in transparent mode? A. 8 B. 16 C. 10 D. 6

Question No : 11

Question No : 12

Question No : 13

5

Answer: A

A. Traffic storm control cannot determine if the packet is unicast or broadcast. B. If you enable broadcast and multicast traffic storm control and the combined broadcastand multicast trafficexceeds the level within a 1 second traffic storm interval, storm controldrops all broadcast and multicast traffic until the end of the storm interval C. Traffic storm control uses the Individual/Group bit in the packet source address todetermine if the packet isunicast or broadcast. D. Traffic storm control monitors incoming traffic levels over a 10 second traffic storm

Answer: B

Which statement about the Cisco Security Manager 4.4 NAT Rediscovery feature is true? A. It provides NAT policies to existing clients that connect from a new switch port. B. It can update shared policies even when the NAT server is offline. C. It enables NAT policy discovery as it updates shared polices. D. It enables NAT policy rediscovery while leaving existing shared polices unchanged.

Answer: D

What is the best description of a unified ACL on a Cisco Firewall A. An Ipv4 ACL with Ipv4 support B. An ACL the support EtherType in additional Ipv6 C. An ACL with both Ipv4 and Ipv6 functionality D. An Ipv6 ACL with Ipv4 backward compatitiblity

Answer: C

Explanation:

Question No : 14

Question No : 15

Question No : 16

6

http://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_co

nfig/intro_intro.html

The Cisco ASA must support dynamic routing and terminating VPN traffic. Which threeCisco ASA options will not support these requirements? (Choose three.) A. transparent mode B. multiple context mode C. active/standby failover mode D. active/active failover mode E. F.

Answer: A,B,D

Which configuration on a switch would be unsuccessful in preventing a DHCP starvation

A. DHCP snooping B. Port security C. D. Rate Limiting

Answer: C

To which port does a firewall send secure logging messages? A. TCP/1500 B. UDP/1500 C. TCP/500 D. UDP/500

Question No : 17

Question No : 18

Question No : 19

7

Answer: A

At which layer does MACsec provide encryption? A. Layer 1 B. Layer 2 C. Layer 3 D. Layer 4

Answer: B

Which option is the Cisco ASA on-box graphical management solution? A. SSH B. ASDM C. D. CSM

Answer: B

When configured in accordance to Cisco best practices, the ip verify source command canmitigate which two types of Layer 2 attacks? (Choose two.) A. rogue DHCP servers B. C. D. MAC spoofing E. F. IP spoofing

Answer: D,F

Question No : 20

Question No : 21

Question No : 22

8

Which set of commands enables logging and displays the log buffer on a Cisco ASA? A. enable loggingshow logging B. logging enableshow logging C. enable logging int e0/1view logging D. logging enablelogging view config

Answer: B

Which function does DNSSEC provide in a DNS infrastructure? A. B. C. It encrypts stored information. D. It logs stored security information.

Answer: A

Which security operations management best practice should be followed to enableappropriate network access for administrators? A. Provide full network access from dedicated network administration systems B. Configure the same management account on every network device C. Dedicate a separate physical or logical plane for management traffic D. Configure switches as terminal servers for secure device access

Answer: C

Which Cisco prime Infrastructure features allows you to assign templates to a group ofwireless LAN controllers with similar configuration requirements?

Question No : 23

Question No : 24

Question No : 25

Question No : 26

9

A. Lightweight access point configuration template B. Composite template C. Controller configuration group D. Shared policy object

Answer: C

What is the default violation mode that is applied by port security? A. B. protect C. D.

Answer: C

On the Cisco ASA, where are the Layer 5-7 policy maps applied? A. inside the Layer 3-4 policy map B. inside the Layer 3-4 class map C. inside the Layer 5-7 class map D. inside the Layer 3-4 service policy E. inside the Layer 5-7 service policy

Answer: A

What are two high-level task areas in a Cisco Prime Infrastructure life-cycle workflow?(Choose two.) A. Design B. Operate C. D. Log

Question No : 27

Question No : 28

Question No : 29

10

E.

Answer: A,B

A switch is being configured at a new location that uses statically assigned IP addresses.Which will ensure that ARP inspection works as expected? A. Configure the 'no-dhcp' keyword at the end of the ip arp inspection command B. Enable static arp inspection using the command 'ip arp inspection static vlan vlan-

C. Configure an arp access-list and apply it to the ip arp inspection command D. Enable port security

Answer: C

You are configuring a Cisco IOS Firewall on a WAN router that is operating as a TrustedRelay Point (TRP) in a voice network. Which feature must you configure to open data-channel pinholes for voice packets that are sourced from a TRP within the WAN? A. CAC B. ACL C. CBAC D. STUN

Answer: D

Which Layer 2 security feature validates ARP packets? A. DAI B. DHCP server C. BPDU guard D. BPDU filtering

Question No : 30

Question No : 31

Question No : 32

11

Answer: A

To which interface on a Cisco ASA 1000V firewall should a security profile be applied when

A. B. C. management D. DMZ

Answer: B

Question No : 33

Question No : 34 CORRECT TEXT

12

Answer: Please check the steps in explanation part below:

Explanation:

1) Click on Service Policy Rules, then Edit the default inspection rule.

2) Click on Rule Actions, then enable HTTP as shown here:

13

3)Click on Configure, then add as shown here:

4)Create the new map in ASDM like shown:

14

5)Edit the policy as shown:

6) Hit OK

Which two configurations are the minimum needed to enable EIGRP on the Cisco ASA

Question No : 35

15

appliance? (Choose two.) A. Enable the EIGRP routing process and specify the AS number. B. C. Configure the EIGRP router ID. D. Use the neighbor command(s) to specify the EIGRP neighbors. E. Use the network command(s) to enable EIGRP on the Cisco ASA interface(s).

Answer: A,E

What are two reasons to implement Cisco IOS MPLS Bandwidth-Assured Layer 2Services? (Choose two.) A. guaranteed bandwidth and peak rates as well as low cycle periods, regardless of whichsystems access thedevice B. increased resiliency through MPLS FRR for AToM circuits and better bandwidthutilization through MPLS TE C. enabled services over an IP/MPLS infrastructure, for enhanced MPLS Layer 2functionality D. provided complete proactive protection against frame and device spoofing

Answer: B,C

When a Cisco ASA is configured in transparent mode, how can ARP traffic be controlled? A. By enabling ARP inspection; however, it cannot be controlled by an ACL B. By enabling ARP inspection or by configuring ACLs C. By configuring ACLs; however, ARP inspection is not supported D. By configuring NAT and ARP inspection

Answer: A

Which option is a valid action for a port security violation ?

Question No : 36

Question No : 37

Question No : 38

16

A. B. Reject C. D. Reset

Answer: A

Which Cisco ASA object group type offers the most flexibility for grouping different servicestogether based on arbitrary protocols? A. B. ICMP C. protocol D. TCP-UDP E.

Answer: E

Which three configurations are needed to enable SNMPv3 support on the Cisco ASA?(Choose three.) A. SNMPv3 Local EngineID B. SNMPv3 Remote EngineID C. SNMP Users D. SNMP Groups E. SNMP Community Strings F. SNMP Hosts

Answer: C,D,F

Question No : 39

Question No : 40

Question No : 41

17

Which two statements about this firewall output are true? (Choose two.) A. The output is from a packet tracer debug. B. All packets are allowed to 192.168.1.0 255.255.0.0. C. All packets are allowed to 192.168.1.0 255.255.255.0. D. All packets are denied. E. The output is from a debug all command.

Answer: A,C

What are three attributes that can be applied to a user account with RBAC? (Choosethree.) A. B. password C. ACE tag D. E. VDC group tag F. expiry date

Answer: B,D,F

Which two features does Cisco Security Manager provide? (Choose two.) A. Configuration and policy deployment before device discovery B. Health and performance monitoring C. Event management and alerting D. Command line menu for troubleshooting E. Ticketing management and tracking

Answer: B,C

Question No : 42

Question No : 43

18

When a Cisco ASA CX module is management by Cisco Prime Security Manager in aMultiple Devices Mode, which mode does the firewall use ? A. Managed Mode B. Unmanaged mode C. Single mode D.

Answer: A

Explanation:

http://www.cisco.com/c/en/us/td/docs/security/asacx/9-1/user/guide/

b_User_Guide_for_ASA_CX_and_PRSM_9_1b_User_Guide_for_ASA_CX_and_PRSM_9

_1_chapter_0110.ht ml#task_7E648F43AD724DA2983699B12E92A528

Which set of commands creates a message list that includes all severity 2 (critical)messages on a Cisco security device? A. logging list critical_messages level 2console logging critical_messages B. logging list critical_messages level 2logging console critical_messages C. logging list critical_messages level 2logging console enable critical_messages D. logging list enable critical_messages level 2 console logging critical_messages

Answer: B

Question No : 44

Question No : 45

Question No : 46

19

To protect Host A and Host B from communicating with each other, which type of PVLANport should be used for each host? A. Host A on a promiscuous port and Host B on a community port B. Host A on a community port and Host B on a promiscuous port C. Host A on an isolated port and Host B on a promiscuous port D. Host A on a promiscuous port and Host B on a promiscuous port E. Host A on an isolated port and host B on an isolated port F. Host A on a community port and Host B on a community port

Answer: E

Which option describes the enhancements that SNMPv3 adds over 1 and 2 versions? A. Predefined events that generate message from the SNMP agent to the NMS B. Addition of authentication and privacy options C. Cleartext transmission of data between SNMP server and SNMP agent D. Addition of the ability to predefine events using traps E. Pooling of devices using GET-NEXT requests F. Use of the object identifier

Answer: B

Explanation:

Question No : 47

20

Microsoft Exams List

70-246 Dump PDF VCE 70-485 Dump PDF VCE 70-742 Dump PDF VCE 98-366 Dump PDF VCE









70-345 Dump PDF VCE 70-496 Dump PDF VCE 70-982 Dump PDF VCE MB2-700 Dump PDF VCE





























http://www.ensurepass.com/microsoft.html








































http://www.ensurepass.com/MB2-700.html

















































































































Cisco Exams List

































300-209 Dump PDF VCE 600-503 Dump PDF VCE 650-159 Dump PDF VCE








































































































































































HOT EXAMS

Cisco Microsoft CompTIA

100-105 Dumps VCE PDF 70-410 Dumps VCE PDF 220-901 Dumps VCE PDF

200-105 Dumps VCE PDF 70-411 Dumps VCE PDF 220-902 Dumps VCE PDF

300-101 Dumps VCE PDF 70-412 Dumps VCE PDF N10-006 Dumps VCE PDF

300-115 Dumps VCE PDF 70-413 Dumps VCE PDF SY0-401 Dumps VCE PDF

300-135 Dumps VCE PDF 70-414 Dumps VCE PDF





70-464 Dumps VCE PDF






http://www.ensurepass.com/cisco.html

http://www.ensurepass.com/microsoft.html

http://www.ensurepass.com/CompTIA.html









http://www.ensurepass.com/N10-006.html



http://www.ensurepass.com/SY0-401.html

















Documents

Implementing Cisco Edge Network Security · PDF fileImplementing Cisco Edge Network Security Solutions ... maximum command can mitigate which two types of Layer 2 attacks? ... the