[Free] 2017(Apr) Ensurepass Testking Cisco 300-206 Latest Dumps 31-40

Ensurepass
2017 April Cisco Official New Released 300-206 Q&As
100% Free Download! 100% Pass Guaranteed!
http://www.ensurepass.com/300-206.html

Implementing Cisco Edge Network Security Solutions

QUESTION 31

What is a required attribute to configure NTP authentication on a Cisco ASA?

 

A.

Key ID

B.

IPsec

C.

AAA

D.

IKEv2

 

Correct Answer: A

 

 

QUESTION 32

What are three attributes that can be applied to a user account with RBAC? (Choose three.)

 

A.

domain

B.

password

C.

ACE tag

D.

user roles

E.

VDC group tag

F.

expiry date

 

Correct Answer: BDF

 

 

QUESTION 33

What is the lowest combination of ASA model and license providing 1 Gigabit Ethernet interfaces?

 

A.

ASA 5505 with failover license option

B.

ASA 5510 Security+ license option

C.

ASA 5520 with any license option

D.

ASA 5540 with AnyConnect Essentials License option

 

Correct Answer: B

 

 

QUESTION 34

What is the default violation mode that is applied by port security?

 

A.

restrict

B.

protect

C.

shutdown

D.

shutdown VLAN

 

Correct Answer: C

 

 

 

QUESTION 35

Which set of commands enables logging and displays the log buffer on a Cisco ASA?

 

A.

enable logging

show logging

B.

logging enable

show logging

C.

enable logging int e0/1

view logging

D.

logging enable

logging view config

 

Correct Answer: B

 

 

QUESTION 36

An attacker has gained physical access to a password protected router. Which command will prevent access to the startup-config in NVRAM?

 

A.

no service password-recovery

B.

no service startup-config

C.

service password-encryption

D.

no confreg 0x2142

 

Correct Answer: A

 

 

QUESTION 37

An administrator installed a Cisco ASA that runs version 9.1. You are asked to configure the firewall through Cisco ASDM. When you attempt to connect to a Cisco ASA with a default configuration, which username and password grants you full access?

 

A.

admin / admin

B.

asaAdmin / (no password)

C.

It is not possible to use Cisco ASDM until a username and password are created via the username usernamepassword password CLI command.

D.

enable_15 / (no password)

E.

cisco / cisco

 

Correct Answer: D

 

 

QUESTION 38

IPv6 addresses in an organization’s network are assigned using Stateless Address Autoconfiguration. What is a security concern of using SLAAC for IPv6 address assignment?

 

A.

Man-In-The-Middle attacks or traffic interception using spoofed IPv6 Router Advertisements

B.

Smurf or amplification attacks using spoofed IPv6 ICMP Neighbor Solicitations

C.

Denial of service attacks using TCP SYN floods

D.

Denial of Service attacks using spoofed IPv6 Router Solicitations

 

Correct Answer: A

 

QUESTION 39

Which statement about Cisco IPS Manager Express is true?

 

A.

It provides basic device management for large-scale deployments.

B.

It provides a GUI for configuring IPS sensors and security modules.

C.

It enables communication with Cisco ASA devices that have no administrative access.

D.

It provides greater security than simple ACLs.

 

Correct Answer: B

 

 

QUESTION 40

If the Cisco ASA 1000V has too few licenses, what is its behavior?

 

A.

It drops all traffic.

B.

It drops all outside-to-inside packets.

C.

It drops all inside-to-outside packets.

D.

It passes the first outside-to-inside packet and drops all remaining packets.

 

Correct Answer: D

100% Free Download!
—Download Free Demo:300-206 Demo PDF
100% Pass Guaranteed!
Download 2017 Ensurepass 300-206 Full Exam PDF and VCE Q&As:222
—Get 10% off your purchase! Copy it:8GTC-8UIE-M1SC [2017.04.01-2017.04.30]

Ensurepass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF + VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 Ensurepass IT Certification PDF and VCE

HOT EXAM!
Proudly powered by WordPress   Premium Style Theme by www.gopiplus.com