★ Pass on Your First TRY ★ 100% Money Back Guarantee ★ Realistic Practice Exam Questions

Free Instant Download NEW 300-206 Exam Dumps (PDF & VCE):
Available on: https://www.certleader.com/300-206-dumps.html


100% Guarantee of 300-206 free exam questions materials and pack for Cisco certification for IT learners, Real Success Guaranteed with Updated 300-206 pdf dumps vce Materials. 100% PASS Implementing Cisco Edge Network Security Solutions exam Today!

2021 Jan pass4sure 300-206:

Q51. Which Cisco switch technology prevents traffic on a LAN from being disrupted by a broadcast, multicast, or unicast flood on a port? 

A. port security 

B. storm control 

C. dynamic ARP inspection 

D. BPDU guard 

E. root guard 

F. dot1x 

Answer: B 


Q52. Which two parameters must be configured before you enable SCP on a router? (Choose two.) 

A. SSH 

B. authorization 

C. ACLs 

D. NTP 

E. TACACS+ 

Answer: A,B 


Q53. A switch is being configured at a new location that uses statically assigned IP addresses. Which will ensure that ARP inspection works as expected? 

A. Configure the 'no-dhcp' keyword at the end of the ip arp inspection command 

B. Enable static arp inspection using the command 'ip arp inspection static vlan vlan-number 

C. Configure an arp access-list and apply it to the ip arp inspection command 

D. Enable port security 

Answer: C 


Q54. Which function in the Cisco ADSM ACL Manager pane allows an administrator to search for a specfic element? 

A. Find 

B. Device Management 

C. Search 

D. Device Setup 

Answer: A 


Q55. What are three ways to add devices in Cisco Prime Infrastructure? (Choose three.) 

A. Use an automated process. 

B. Import devices from a CSV file. 

C. Add devices manually. 

D. Use RADIUS. 

E. Use the Access Control Server. 

F. Use Cisco Security Manager. 

Answer: A,B,C 


Abreast of the times 300-206 cbt nuggets:

Q56. Which two web browsers are supported for the Cisco ISE GUI? (Choose two.) 

A. HTTPS-enabled Mozilla Firefox version 3.x 

B. Netscape Navigator version 9 

C. Microsoft Internet Explorer version 8 in Internet Explorer 8-only mode 

D. Microsoft Internet Explorer version 8 in all Internet Explorer modes 

E. Google Chrome (all versions) 

Answer: A,C 


Q57. IPv6 addresses in an organization's network are assigned using Stateless Address Autoconfiguration. What is a security concern of using SLAAC for IPv6 address assignment? 

A. Man-In-The-Middle attacks or traffic interception using spoofed IPv6 Router Advertisements 

B. Smurf or amplification attacks using spoofed IPv6 ICMP Neighbor Solicitations 

C. Denial of service attacks using TCP SYN floods 

D. Denial of Service attacks using spoofed IPv6 Router Solicitations 

Answer: A 


Q58. CORRECT TEXT 

You are a network security engineer for the Secure-X network. You have been tasked with implementing dynamic network object NAT with PAT on a Cisco ASA. 

You must configure the Cisco ASA such that the source IP addresses of all internal hosts are translated to a single IP address (using different ports) when the internal hosts access the Internet. 

To successfully complete this activity, you must perform the following tasks: 

. Use the Cisco ASDM GUI on the Admin PC to configure dynamic network object NAT with PAT using the following parameters: 

. Network object name: Internal-Networks 

. IP subnet: 10.10.0.0/16 

. Translated IP address: 192.0.2.100 

. Source interface: inside 

. Destination interface: outside 

NOTE: The object (TRANSLATED-INSIDE-HOSTS) for this translated IP address has already been created for your use in this activity. 

NOTE: Not all ASDM screens are active for this exercise. 

NOTE: Login credentials are not needed for this simulation. 

. In the Cisco ASDM, display and view the auto-generated NAT rule. 

. From the Employee PC, generate traffic to SP-SRV by opening a browser and navigating to http://sp-srv.sp.public. 

. From the Guest PC, generate traffic to SP-SRV by opening a browser and navigating to http://sp-srv.sp.public. 

. At the CLI of the Cisco ASA, display your NAT configuration. You should see the configured policy and statistics for translated packets. 

. At the CLI of the Cisco ASA, display the translation table. You should see dynamic translations for the Employee PC and the Guest PC. Both inside IP addresses translate to the same IP address, but using different ports. 

You have completed this exercise when you have configured and successfully tested dynamic network object NAT with PAT. 

Answer: Use the following configuration as per exhibit in explanation. 


Q59. Which three options are hardening techniques for Cisco IOS routers? (Choose three.) 

A. limiting access to infrastructure with access control lists 

B. enabling service password recovery 

C. using SSH whenever possible 

D. encrypting the service password 

E. using Telnet whenever possible 

F. enabling DHCP snooping 

Answer: A,C,D 


Q60. How much storage is allotted to maintain system,configuration , and image files on the Cisco ASA 1000V during OVF template file deployment? 

A. 1GB 

B. 5GB 

C. 2GB 

D. 10GB 

Answer: C