Tips to Pass 300-206 Exam (101 to 110)

Act now and download your Cisco 300-206 test today! Do not waste time for the worthless Cisco 300-206 tutorials. Download Renovate Cisco Implementing Cisco Edge Network Security Solutions exam with real questions and answers and begin to learn Cisco 300-206 with a classic professional.

2021 Mar 300-206 actual exam

Q101. The Cisco Email Security Appliance can be managed with both local and external users of different privilege levels. What three external modes of authentication are supported? (Choose three.) 

A. LDAP authentication 

B. RADIUS Authentication 

C. TACAS 

D. SSH host keys 

E. Common Access Card Authentication 

F. RSA Single use tokens 

Answer: A,B,D 

Q102. What is the default behavior of an access list on a Cisco ASA? 

A. It will permit or deny traffic based on the access list criteria. 

B. It will permit or deny all traffic on a specified interface. 

C. It will have no affect until applied to an interface, tunnel-group or other traffic flow. 

D. It will allow all traffic. 

Answer: C 

Q103. Which feature can suppress packet flooding in a network? 

A. PortFast 

B. BPDU guard 

C. Dynamic ARP Inspection 

D. storm control 

Answer: D 

Q104. Which three options are default settings for NTP parameters on a Cisco ASA? (Choose three.) 

A. NTP authentication is enabled. 

B. NTP authentication is disabled. 

C. NTP logging is enabled. 

D. NTP logging is disabled. 

E. NTP traffic is not restricted. 

F. NTP traffic is restricted. 

Answer: B,D,E 

Q105. Which statement about Dynamic ARP Inspection is true ? 

A. In a typical network, you make all ports as trusted expect for the ports connection to switches , which are untrusted 

B. DAI associates a trust state with each switch 

C. DAI determines the validity of an ARP packet based on valid IP to MAC address binding from the DHCP snooping database 

D. DAI intercepts all ARP requests and responses on trusted ports only 

E. DAI cannot drop invalid ARP packets 

Answer: C 

Rebirth 300-206 free question:

Q106. A network engineer is troubleshooting and configures the ASA logging level to debugging. The logging-buffer is dominated by %ASA-6-305009 log messages. Which command suppresses those syslog messages while maintaining ability to troubleshoot? 

A. no logging buffered 305009 

B. message 305009 disable 

C. no message 305009 logging 

D. no logging message 305009 

Answer: D 

Q107. Which three commands can be used to harden a switch? (Choose three.) 

A. switch(config-if)# spanning-tree bpdufilter enable 

B. switch(config)# ip dhcp snooping 

C. switch(config)# errdisable recovery interval 900 

D. switch(config-if)# spanning-tree guard root 

E. switch(config-if)# spanning-tree bpduguard disable 

F. switch(config-if)# no cdp enable 

Answer: B,D,F 

Q108. In IOS routers, what configuration can ensure both prevention of ntp spoofing and accurate time ensured? 

A. ACL permitting udp 123 from ntp server 

B. ntp authentication 

C. multiple ntp servers 

D. local system clock 

Answer: B 

Q109. CORRECT TEXT 

You are a network security engineer for the Secure-X network. You have been tasked with 

implementing dynamic network object NAT with PAT on a Cisco ASA. You must configure the Cisco ASA such that the source IP addresses of all internal hosts are translated to a single IP address (using different ports) when the internal hosts access the Internet. 

To successfully complete this activity, you must perform the following tasks: 

. Use the Cisco ASDM GUI on the Admin PC to configure dynamic network object NAT with PAT using the following parameters: 

. Network object name: Internal-Networks 

. IP subnet: 10.10.0.0/16 

. Translated IP address: 192.0.2.100 

. Source interface: inside 

. Destination interface: outside 

NOTE: The object (TRANSLATED-INSIDE-HOSTS) for this translated IP address has already been created for your use in this activity. 

NOTE: Not all ASDM screens are active for this exercise. 

NOTE: Login credentials are not needed for this simulation. 

. In the Cisco ASDM, display and view the auto-generated NAT rule. 

. From the Employee PC, generate traffic to SP-SRV by opening a browser and navigating to http://sp-srv.sp.public. 

. From the Guest PC, generate traffic to SP-SRV by opening a browser and navigating to http://sp-srv.sp.public. 

. At the CLI of the Cisco ASA, display your NAT configuration. You should see the configured policy and statistics for translated packets. 

. At the CLI of the Cisco ASA, display the translation table. You should see dynamic translations for the Employee PC and the Guest PC. Both inside IP addresses translate to the same IP address, but using different ports. 

You have completed this exercise when you have configured and successfully tested dynamic network object NAT with PAT. 

Answer: See the explanation for detailed answer to this sim question. 

Q110. Which ASA feature is used to keep track of suspected attackers who create connections to too many hosts or ports? 

A. complex threat detection 

B. scanning threat detection 

C. basic threat detection 

D. advanced threat detection 

Answer: B