This page was exported from New Lead2pass PDF And VCE Ensure IT Exam Pass 100% [ https://www.dumps4microsoft.com ]

Export date:Wed Apr 24 18:30:12 2024 / +0000 GMT

___________________________________________________


Title: [2017 New] Free Lead2pass Cisco 300-206 Exam Questions Download (151-175)

---------------------------------------------------


2017 August Cisco Official New Released 300-206 Dumps in Lead2pass.com!  100% Free Download! 100% Pass Guaranteed!  2017 get prepared with fully updated Cisco 300-206 real exam questions and accurate answers for 300-206 exam. Lead2pass IT experts review the 300-206 newly added questions and offer correct Cisco 300-206 exam questions answers. 100% pass easily! Following questions and answers are all new published by Cisco Official Exam Center: https://www.lead2pass.com/300-206.html  QUESTION 151Which two TCP ports must be open on the Cisco Security Manager server to allow the server to communicate with the Cisco Security Manager client? (Choose two.) A.&nbsp;&nbsp;&nbsp; 1741B.&nbsp;&nbsp;&nbsp; 443C.&nbsp;&nbsp;&nbsp; 80D.&nbsp;&nbsp;&nbsp; 1740E.&nbsp;&nbsp;&nbsp; 8080Answer: AB QUESTION 152Which command enables the HTTP server daemon for Cisco ASDM access? A.&nbsp;&nbsp;&nbsp; http server enableB.&nbsp;&nbsp;&nbsp; http server enable 443C.&nbsp;&nbsp;&nbsp; crypto key generate rsa modulus 1024D.&nbsp;&nbsp;&nbsp; no http server enable Answer: A QUESTION 153Which function in the Cisco ADSM ACL Manager pane allows an administrator to search for a specfic element? A.&nbsp;&nbsp;&nbsp; FindB.&nbsp;&nbsp;&nbsp; Device ManagementC.&nbsp;&nbsp;&nbsp; SearchD.&nbsp;&nbsp;&nbsp; Device Setup Answer: A QUESTION 154Which two router commands enable NetFlow on an interface? (Choose two.) A.&nbsp;&nbsp;&nbsp; ip flow ingressB.&nbsp;&nbsp;&nbsp; ip flow egressC.&nbsp;&nbsp;&nbsp; ip route-cache flow infer-fieldsD.&nbsp;&nbsp;&nbsp; ip flow ingress infer-fieldsE.&nbsp;&nbsp;&nbsp; ip flow-export version 9 Answer: AB QUESTION 155Refer to the exhibit. Which two statements about the SNMP configuration are true? (Choose two.) &nbsp; A.&nbsp;&nbsp;&nbsp; The router's IP address is 192.168.1.1.B.&nbsp;&nbsp;&nbsp; The SNMP server's IP address is 192.168.1.1.C.&nbsp;&nbsp;&nbsp; Only the local SNMP engine is configured.D.&nbsp;&nbsp;&nbsp; Both the local and remote SNMP engines are configured.E.&nbsp;&nbsp;&nbsp; The router is connected to the SNMP server via port 162. Answer: BD QUESTION 156To which port does a firewall send secure logging messages? A.&nbsp;&nbsp;&nbsp; TCP/1500B.&nbsp;&nbsp;&nbsp; UDP/1500C.&nbsp;&nbsp;&nbsp; TCP/500D.&nbsp;&nbsp;&nbsp; UDP/500 Answer: A QUESTION 157What is a required attribute to configure NTP authentication on a Cisco ASA? A.&nbsp;&nbsp;&nbsp; Key IDB.&nbsp;&nbsp;&nbsp; IPsecC.&nbsp;&nbsp;&nbsp; AAAD.&nbsp;&nbsp;&nbsp; IKEv2 Answer: A QUESTION 158Which function does DNSSEC provide in a DNS infrastructure? A.&nbsp;&nbsp;&nbsp; It authenticates stored information.B.&nbsp;&nbsp;&nbsp; It authorizes stored information.C.&nbsp;&nbsp;&nbsp; It encrypts stored information.D.&nbsp;&nbsp;&nbsp; It logs stored security information. Answer: A QUESTION 159Refer to the exhibit. Which two statements about this firewall output are true? (Choose two.) &nbsp; A.&nbsp;&nbsp;&nbsp; The output is from a packet tracer debug.B.&nbsp;&nbsp;&nbsp; All packets are allowed to 192.168.1.0 255.255.0.0.C.&nbsp;&nbsp;&nbsp; All packets are allowed to 192.168.1.0 255.255.255.0.D.&nbsp;&nbsp;&nbsp; All packets are denied.E.&nbsp;&nbsp;&nbsp; The output is from a debug all command. Answer: AC QUESTION 160Which utility can you use to troubleshoot and determine the timeline of packet changes in a data path within a Cisco firewall? A.&nbsp;&nbsp;&nbsp; packet tracerB.&nbsp;&nbsp;&nbsp; pingC.&nbsp;&nbsp;&nbsp; tracerouteD.&nbsp;&nbsp;&nbsp; SNMP walk Answer: A QUESTION 161What can an administrator do to simultaneously capture and trace packets in a Cisco ASA? A.&nbsp;&nbsp;&nbsp; Install a Cisco ASA virtual appliance.B.&nbsp;&nbsp;&nbsp; Use the trace option of the capture command.C.&nbsp;&nbsp;&nbsp; Use the trace option of the packet-tracer command.D.&nbsp;&nbsp;&nbsp; Install a switch with a code that supports capturing, and configure a trunk to the Cisco ASA. Answer: B QUESTION 162Refer to the exhibit. Which command can produce this packet tracer output on a firewall? &nbsp; A.&nbsp;&nbsp;&nbsp; packet-tracer input INSIDE tcp 192.168.1.100 88 192.168.2.200 3028B.&nbsp;&nbsp;&nbsp; packet-tracer output INSIDE tcp 192.168.1.100 88 192.168.2.200 3028C.&nbsp;&nbsp;&nbsp; packet-tracer input INSIDE tcp 192.168.2.200 3028 192.168.1.100 88D.&nbsp;&nbsp;&nbsp; packet-tracer output INSIDE tcp 192.168.2.200 3028 192.168.1.100 88 Answer: A QUESTION 163At which firewall severity level will debugs appear on a Cisco ASA? A.&nbsp;&nbsp;&nbsp; 7B.&nbsp;&nbsp;&nbsp; 6C.&nbsp;&nbsp;&nbsp; 5D.&nbsp;&nbsp;&nbsp; 4 Answer: A QUESTION 164A Cisco ASA is configured in multiple context mode and has two user-defined contexts--Context_A and Context_B. From which context are device logging messages sent? A.&nbsp;&nbsp;&nbsp; AdminB.&nbsp;&nbsp;&nbsp; Context_AC.&nbsp;&nbsp;&nbsp; Context_BD.&nbsp;&nbsp;&nbsp; System Answer: A QUESTION 165Which three statements about the software requirements for a firewall failover configuration are true? (Choose three.) A.&nbsp;&nbsp;&nbsp; The firewalls must be in the same operating mode.B.&nbsp;&nbsp;&nbsp; The firewalls must have the same major and minor software version.C.&nbsp;&nbsp;&nbsp; The firewalls must be in the same context mode.D.&nbsp;&nbsp;&nbsp; The firewalls must have the same major software version but can have different minor versions.E.&nbsp;&nbsp;&nbsp; The firewalls can be in different context modes.F.&nbsp;&nbsp;&nbsp; The firewalls can have different Cisco AnyConnect images. Answer: ABC QUESTION 166What can you do to enable inter-interface firewall communication for traffic that flows between two interfaces of the same security level? A.&nbsp;&nbsp;&nbsp; Run the command same-security-traffic permit inter-interface globally.B.&nbsp;&nbsp;&nbsp; Run the command same-security-traffic permit intra-interface globally.C.&nbsp;&nbsp;&nbsp; Configure both interfaces to have the same security level.D.&nbsp;&nbsp;&nbsp; Run the command same-security-traffic permit inter-interface on the interface with the highest security level. Answer: A QUESTION 167How many bridge groups are supported on a firewall that operate in transparent mode? A.&nbsp;&nbsp;&nbsp; 8B.&nbsp;&nbsp;&nbsp; 16C.&nbsp;&nbsp;&nbsp; 10D.&nbsp;&nbsp;&nbsp; 6 Answer: A QUESTION 168In which way are management packets classified on a firewall that operates in multiple context mode? A.&nbsp;&nbsp;&nbsp; by their interface IP addressB.&nbsp;&nbsp;&nbsp; by the routing tableC.&nbsp;&nbsp;&nbsp; by NATD.&nbsp;&nbsp;&nbsp; by their MAC addresses Answer: A QUESTION 169Where on a firewall does an administrator assign interfaces to contexts? A.&nbsp;&nbsp;&nbsp; in the system execution spaceB.&nbsp;&nbsp;&nbsp; in the admin contextC.&nbsp;&nbsp;&nbsp; in a user-defined contextD.&nbsp;&nbsp;&nbsp; in the console Answer: A QUESTION 170Which kind of Layer 2 attack targets the STP root bridge election process and allows an attacker to control the flow of traffic? A.&nbsp;&nbsp;&nbsp; man-in-the-middleB.&nbsp;&nbsp;&nbsp; denial of serviceC.&nbsp;&nbsp;&nbsp; distributed denial of serviceD.&nbsp;&nbsp;&nbsp; CAM overflow Answer: A QUESTION 171Which Layer 2 security feature validates ARP packets? A.&nbsp;&nbsp;&nbsp; DAIB.&nbsp;&nbsp;&nbsp; DHCP serverC.&nbsp;&nbsp;&nbsp; BPDU guardD.&nbsp;&nbsp;&nbsp; BPDU filtering Answer: A QUESTION 172If you disable PortFast on switch ports that are connected to a Cisco ASA and globally turn on BPDU filtering, what is the effect on the switch ports? A.&nbsp;&nbsp;&nbsp; The switch ports are prevented from going into an err-disable state if a BPDU is received.B.&nbsp;&nbsp;&nbsp; The switch ports are prevented from going into an err-disable state if a BPDU is sent.C.&nbsp;&nbsp;&nbsp; The switch ports are prevented from going into an err-disable state if a BPDU is received and sent.D.&nbsp;&nbsp;&nbsp; The switch ports are prevented from forming a trunk. Answer: C QUESTION 173In a Cisco ASAv failover deployment, which interface is preconfigured as the failover interface? A.&nbsp;&nbsp;&nbsp; GigabitEthernet0/2B.&nbsp;&nbsp;&nbsp; GigabitEthernet0/4C.&nbsp;&nbsp;&nbsp; GigabitEthernet0/6D.&nbsp;&nbsp;&nbsp; GigabitEthernet0/8 Answer: D QUESTION 174What are the three types of private VLAN ports? (Choose three.) A.&nbsp;&nbsp;&nbsp; promiscuousB.&nbsp;&nbsp;&nbsp; isolatedC.&nbsp;&nbsp;&nbsp; communityD.&nbsp;&nbsp;&nbsp; primaryE.&nbsp;&nbsp;&nbsp; secondaryF.&nbsp;&nbsp;&nbsp; trunk Answer: ABC QUESTION 175Which VTP mode supports private VLANs on a switch? A.&nbsp;&nbsp;&nbsp; transparentB.&nbsp;&nbsp;&nbsp; serverC.&nbsp;&nbsp;&nbsp; clientD.&nbsp;&nbsp;&nbsp; off Answer: A Latest 300-206 questions and answers from Cisco Exam Center offered by Lead2pass for free share now! Read and remember all real questions answers, Guarantee pass 300-206 real test 100% or full money back! 300-206 new questions on Google Drive: https://drive.google.com/open?id=0B3Syig5i8gpDQ3hFS2lmMTdVb3c  2017 Cisco 300-206 exam dumps (All 251 Q&amp;As) from Lead2pass:  https://www.lead2pass.com/300-206.html [100% Exam Pass Guaranteed]

---------------------------------------------------


Images: 

---------------------------------------------------




---------------------------------------------------


Post date: 2017-08-01 08:17:34

Post date GMT: 2017-08-01 08:17:34

Post modified date: 2017-08-01 08:17:34

Post modified date GMT: 2017-08-01 08:17:34



____________________________________________________________________________________________


Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com