300-206無料問題集「Cisco Implementing Cisco Edge Network Security Solutions」

質問 1

An engineer has enforced DHCP snooping on the enterprise switches. In which two cases does the switch drop a DHCP packet? (Choose two.)

（A）A packet is received on an untrusted interface, and the source MAC address and the DHCP client hardware address match.

（B）A DHCP relay agent forwards a DHCP packet that includes a 0.0.0.0 relay-agent IP address.

（C）A packet is received on an untrusted interface, and the source MAC address and the DHCP client hardware address do not match.

（D）The switch receives a DHCPRELEASE broadcast message that has a MAC address in the DHCP snooping binding database, and the interface information in the binding database matches the interface on which the message was received.

（E）A packet from a DHCP server, such as DHCPOFFER or DHCPPLEASEQUERY packet, is received from outside the network or firewall.

正解：C、E 解答を投票する

質問 2

Which two control-plane subinterfaces can be found in IOS-based routers that support CPPr? (Choose two.)

（A）transit

（B）rate limiting

（C）host

（D）port filtering

（E）CoPP

正解：B、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which two options can be used when configuring a packet capture from the command line within the ASA using the capture command? (Choose two.)

（A）snap-length

（B）type

（C）host

（D）real-time

（E）details

正解：B、D 解答を投票する

質問 4

An engineer must secure a current monitoring environment by using the strongest encryption allowed within SNMPv3 configuration. Which two methods meet this requirement? (Choose two.)

（A）AES

（B）RSA-SIG

（C）3DES

（D）MD5

（E）DES

正解：A、C 解答を投票する

質問 5

Which statement about SenderBase sender-reputation filtering approaches on the Cisco ESA is true?

（A）The moderate approach combines high performance with some false positives.

（B）The aggressive approach provides near zero false positives at the cost of lower performance.

（C）The conservative approach provides near zero false positives at the cost of lower performance.

（D）The conservative approach provides good performance with near zero false positives.

（E）The moderate approach provides maximum performance with some false positives.

（F）The aggressive approach provides maximum performance at the cost of numerous false positives.

正解：D 解答を投票する

質問 6

Which ASA feature can inspect encrypted VoIP traffic between a Cisco IP phone and the Cisco UCM?

（A）TLS proxy

（B）mobile proxy

（C）MGCP security services

（D）content security services

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

A network engineer wants to add a new view to an IOS device configured with RBAC. Which privilege is required for that task?

（A）Level 16

（B）root view

（C）admin view

（D）Level 15

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

A security engineer is troubleshooting traffic across a Cisco ASA firewall using a packet tracer. When configuring the packet tracker, which option must be used first?

（A）destination

（B）source

（C）interface

（D）protocol

正解：C 解答を投票する

質問 9

Which statement describes what the arp outside 1.1.1.1 0192.7 gid.0020 command accomplishes?

（A）configures proxy ARP for host 1.1.1.1

（B）creates static ARP entry for host 1.1.1.1

（C）assigns virtual MAC address for host 1.1.1.1

（D）enables ARP Inspection for host 1.1.1.1

正解：B 解答を投票する

300-206 無料問題集「Cisco Implementing Cisco Edge Network Security Solutions」

弊社を連絡する

関連リンク

トップ試験