300-206無料問題集「Cisco Implementing Cisco Edge Network Security Solutions」

質問 1

Which two statements about PVLANs are true? (Choose two.)

（A）They use VTY to distribute VLAN information across multiple Layer 2 network switches.

（B）They carry unidirectional traffic from one or more isolated VLANs downstream to the gateway router.

（C）When they span multiple Layer 2 switches, they must be configured manually on intermediary switches.

（D）They are marked with P in the output of the show vlan private-vlan command.

（E）They provide Layer 2 segregation, which allows multiple end devices to share the same IP subnet.

正解：B、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

An engineer has configured a unified IPV6/IPV4 ACL to be used for access control on the Cisco ASA in routed mode. Which additional IPV4/IPv6 component is needed for the ACL to function properly?

（A）service object

（B）mixed object group

（C）explicit deny statement

（D）network address translation

正解：D 解答を投票する

質問 3

Which activity is performed by the switch when Dynamic ARP inspection is configured?

（A）It intercepts all ARP requests and responses on untrusted ports.

（B）It forwards ARP packets that it receives on trusted ports, nust still checks them.

（C）It drops ARP packets for MAC addresses that are not present in the DHCP snooping database table.

（D）It bypasses all validation checks for MAC addresses that are present in the DHCP snooping database table.

正解：A 解答を投票する

質問 4

An enterprise is hosting an application that opens a secondary UDP port. The initial session on a well-known port is used to negotiate the secondary dynamically assigned port. Which feature on Cisco ASA monitors sessions to identify the dynamic port assignments and permits data exchange on these ports?

（A）Allow Any

（B）NAT

（C）High & Low Security level

（D）Protocol Inspection

正解：D 解答を投票する

質問 5

Which statement about Cisco ASA botnet filtering is true?

（A）BTF can rate-limit traffic to known botnet addresses.

（B）BTF checks if the domain name in a DNS reply matches a name in the BTF database.

（C）BTF takes the MD5 value and compares it against the dynamic database.

（D）BTF redirects DNS queries to a BTF server for further analysis.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

An engineer must implement secure device management on a Cisco ASA. Which two actions are required?
(Choose two)

（A）configure SNMPv3

（B）disable login timeouts

（C）enable Tenet

（D）enable SSH

（E）enable logging

正解：A、D 解答を投票する

質問 7

An engineer is adding devices to Cisco Prime Infrastructure using Discovery and wants to use Web Services Management Agent for configuring devices. Which credential setting must be used?

（A）Telnet Credential

（B）SSH Credential

（C）SNMPv3 Credential

（D）SNMPv2 Credential

正解：D 解答を投票する

質問 8

Which option is a different type of secondary VLAN?

（A）Virtual

（B）Community

（C）Transparent

（D）Promiscuous

正解：B 解答を投票する

質問 9

Which three configuration tasks do you perform to allow NetFlow on a Cisco ASA 5500 Series firewall?
(Choose three.)

（A）Apply the newly created class map to the global policy.

（B）Define a NetFlow collector by using the flow-export command.

（C）Create an ACL to allow UDP traffic on port 9996.

（D）Enable NetFlow Version 9.

（E）Create a class map to match interesting traffic.

（F）Apply NetFlow Exporter to the outside interface in the inbound direction.

正解：A、B、E 解答を投票する

質問 10

Refer to the exhibit.

An engineer has configured identify options on an ASA using ASDM. Which domain is used for a user who does not have explicitly configured domain?

（A）LOCAL domain name for all locally defined users and groups

（B）NetBIOS domain name configured on the Active Directory domain controller

（C）PIXTEST

（D）DOMAIN1

正解：A 解答を投票する

300-206 無料問題集「Cisco Implementing Cisco Edge Network Security Solutions」

弊社を連絡する

関連リンク

トップ試験