Latest Cisco 300-206 Practice Exams Free Download with PDF & VCE
Implementing Cisco Edge Network Security Solutions: 300-206 Exam
300-206 Questions & Answers
Exam Code: 300-206
Exam Name: Implementing Cisco Edge Network Security Solutions
Q & A: 95 Q&As
A network administrator is creating an ASA-CX administrative user account with the following
– The user will be responsible for configuring security policies on
– The user needs read-write access to policies.
– The account has no more rights than necessary for the job.
What role will be assigned to the user?
B. Security administrator
C. System administrator
D. Root Administrator
E. Exec administrator
Which tool provides the necessary information to determine hardware lifecycle and compliance
details for deployed network devices?
A. Prime Infrastructure
B. Prime Assurance
C. Prime Network Registrar
D. Prime Network Analysis Module
Which three compliance and audit report types are available in Cisco Prime Infrastructure?
B. Change Audit
C. Vendor Advisory
D. TAC Service Request
E. Validated Design
F. Smart Business Architecture
Cisco Security Manager can manage which three products? (Choose three.)
A. Cisco IOS
B. Cisco ASA
C. Cisco IPS
D. Cisco WLC E. Cisco Web Security Appliance
F. Cisco Email Security Appliance
G. Cisco ASA CX
H. Cisco CRS
Which two web browsers are supported for the Cisco ISE GUI? (Choose two.)
A. HTTPS-enabled Mozilla Firefox version 3.x
B. Netscape Navigator version 9
C. Microsoft Internet Explorer version 8 in Internet Explorer 8-only mode
D. Microsoft Internet Explorer version 8 in all Internet Explorer modes
E. Google Chrome (all versions)
When a Cisco ASA is configured in multicontext mode, which command is used to change
A. changeto config context
B. changeto context
C. changeto/config context change
D. changeto/config context 2
Which statement about the Cisco Security Manager 4.4 NAT Rediscovery feature is true?
A. It provides NAT policies to existing clients that connect from a new switch port.
B. It can update shared policies even when the NAT server is offline.
C. It enables NAT policy discovery as it updates shared polices.
D. It enables NAT policy rediscovery while leaving existing shared polices unchanged.
When you install a Cisco ASA AIP-SSM, which statement about the main Cisco ASDM home
page is true?
A. It is replaced by the Cisco AIP-SSM home page.
B. It must reconnect to the NAT policies database.
C. The administrator can manually update the page.
D. It displays a new Intrusion Prevention panel.
Which Cisco product provides a GUI-based device management tool to configure Cisco access
A. Cisco ASDM
B. Cisco CP Express
C. Cisco ASA 5500
D. Cisco CP
Which statement about Cisco IPS Manager Express is true?
A. It provides basic device management for large-scale deployments.
B. It provides a GUI for configuring IPS sensors and security modules.
C. It enables communication with Cisco ASA devices that have no administrative access.
D. It provides greater security than simple ACLs.
Which three options describe how SNMPv3 traps can be securely configured to be sent by IOS?
A. An SNMPv3 group is defined to configure the read and write views of the group.
B. An SNMPv3 user is assigned to SNMPv3 group and defines the encryption and authentication credentials.
C. An SNMPv3 host is configured to define where the SNMPv3 traps will be sent.
D. An SNMPv3 host is used to configure the encryption and authentication credentials for SNMPv3 traps.
E. An SNMPv3 view is defined to configure the address of where the traps will be sent.
F. An SNMPv3 group is used to configure the OIDs that will be reported.
A network engineer is asked to configure NetFlow to sample one of every 100 packets on a
router’s fa0/0 interface. Which configuration enables sampling, assuming that NetFlow is already
configured and running on the router’s fa0/0 interface?
A. flow-sampler-map flow1
mode random one-out-of 100
B. flow monitor flow1
mode random one-out-of 100
Cisco 300-206 Exam
interface fas0/0 ip flow monitor flow1
C. flow-sampler-map flow1
D. ip flow-export source fas0/0 one-out-of 100
What is the default log level on the Cisco Web Security Appliance?
Which command sets the source IP address of the NetFlow exports of a device?
A. ip source flow-export
B. ip source netflow-export
C. ip flow-export source
D. ip netflow-export source
Which two SNMPv3 features ensure that SNMP packets have been sent securely?” Choose two.
A. host authorization
…go to http://www.lead2pass.com/300-206.html to download the full version Q&As.
Why Choose Lead2pass?
If you want to pass the exam successfully in first attempt you have to choose the best IT study material provider, in my opinion, Lead2pass is one of the best way to prepare for the exam.
|One Time Purchase||✔||✖||✖||✖||✖|
|100% Pass Guarantee||✔||✖||✖||✖||✖|
|100% Money Back||✔||✖||✖||✖||✖|