Latest Braindump2go Cisco 300-206 Certification PDF With 100% Guarantee Pass (21-30)

Cisco Official News: Do you want to pass Cisco 300-206 Exam ? If you answered YES, then look no further. Braindump2go offers you the best 300-206 exam questions which cover all core test topics and certification requirements.All REAL questions and answers from Cisco Exam Center will help you be a 300-206 certified!

Vendor: Cisco
Exam Code: 300-206
Exam Name: Implementing Cisco Edge Network Security Solutions

Keywords: 300-206 Exam Dumps,300-206 Practice Tests,300-206 Practice Exams,300-206 Exam Questions,300-206 PDF,300-206 VCE Free,300-206 Book,300-206 E-Book,300-206 Study Guide,300-206 Braindump,300-206 Prep Guide

QUESTION 21
Which technology provides forwarding-plane abstraction to support Layer 2 to Layer 7 network services in Cisco Nexus 1000V?

A.    Virtual Service Node
B.    Virtual Service Gateway
C.    Virtual Service Data Path
D.    Virtual Service Agent

Answer: C

QUESTION 22
To which interface on a Cisco ASA 1000V firewall should a security profile be applied when a VM sits behind it?

A.    outside
B.    inside
C.    management
D.    DMZ

Answer: B

QUESTION 23
You are configuring a Cisco IOS Firewall on a WAN router that is operating as a Trusted Relay Point (TRP) in a voice network. Which feature must you configure to open data- channel pinholes for voice packets that are sourced from a TRP within the WAN?

A.    CAC
B.    ACL
C.    CBAC
D.    STUN

Answer: D

QUESTION 24
If you encounter problems logging in to the Cisco Security Manager 4.4 web server or client or backing up its databases, which account has most likely been improperly modified?

A.    admin (the default administrator account)
B.    casuser (the default service account)
C.    guest (the default guest account)
D.    user (the default user account)

Answer: B

QUESTION 25
Which component does Cisco ASDM require on the host Cisco ASA 5500 Series or Cisco PIX security appliance?

A.    a DES or 3DES license
B.    a NAT policy server
C.    a SQL database
D.    a Kerberos key
E.    a digital certificate

Answer: A

QUESTION 26
Which of the following would need to be created to configure an application-layer inspection of SMTP traffic operating on port 2525?

A.    A class-map that matches port 2525 and applying an inspect ESMTP policy-map for that class in
the global inspection policy
B.    A policy-map that matches port 2525 and applying an inspect ESMTP class-map for that policy
C.    An access-list that matches on TCP port 2525 traffic and applying it on an interface with the inspect option
D.    A class-map that matches port 2525 and applying it on an access-list using the inspect option

Answer: A

QUESTION 27
A network administrator is creating an ASA-CX administrative user account with the following parameters:
- The user will be responsible for configuring security policies on network devices.
- The user needs read-write access to policies.
- The account has no more rights than necessary for the job.
What role will be assigned to the user?

A.    Administrator
B.    Security administrator
C.    System administrator
D.    Root Administrator
E.    Exec administrator

Answer: B

QUESTION 28
Which tool provides the necessary information to determine hardware lifecycle and compliance details for deployed network devices?

A.    Prime Infrastructure
B.    Prime Assurance
C.    Prime Network Registrar
D.    Prime Network Analysis Module

Answer: A

QUESTION 29
Which three compliance and audit report types are available in Cisco Prime Infrastructure? (Choose three.)

A.    Service
B.    Change Audit
C.    Vendor Advisory
D.    TAC Service Request
E.    Validated Design
F.    Smart Business Architecture

Answer: ABC

QUESTION 30
Which statement about the Cisco ASA botnet traffic filter is true?

A.    The four threat levels are low, moderate, high, and very high.
B.    By default, the dynamic-filter drop blacklist interface outside command drops traffic with a threat
level of high or very high.
C.    Static blacklist entries always have a very high threat level.
D.    A static or dynamic blacklist entry always takes precedence over the static whitelist entry.

Answer: C

http://www.braindump2go.com/300-206.html ¹

1. http://www.braindump2go.com/300-206.html