web analytics

[15-Dec-2019] New 300-206 Dumps with VCE and PDF from PassLeader (Update Questions)

New 300-206 exam questions from PassLeader 300-206 dumps! Welcome to download the newest PassLeader 300-206 VCE and PDF dumps: https://www.passleader.com/300-206.html (501 Q&As)

P.S. New 300-206 dumps are available on Google Drive shared by PassLeader: https://drive.google.com/open?id=0B-ob6L_QjGLpflBDRGVtd3JJR2k3ZF9sOTAyOHQ0bW1fdlJsZjFwS2xxZmx1TGVrOEdraTA

NEW QUESTION 490
Which type of authentication and encryption does SNMPv3 use at the authPriv security level?

A.    username authentication with MD5 or SHA encryption
B.    MD5 or SHA authentication with DES encryption
C.    username authentication with DES encryption
D.    DES authentication with MD5 or SHA encryption

Answer: B

NEW QUESTION 491
An engineer wants to ensure that a multicontext Cisco ASA determines the proper context to send a packet. Which two classification criteria must be unique for each context for this determination to occur? (Choose two.)

A.    ARP table
B.    transparent forwarding
C.    session state
D.    interfaces
E.    MAC addresses

Answer: DE

NEW QUESTION 492
Which two device types can you examine with a TrustSec Readiness Assessment report? (Choose two.)

A.    SGACL devices
B.    TrustSec incapable devices
C.    enforcement devices
D.    authentication devices
E.    security group tagging devices

Answer: BC

NEW QUESTION 493
An engineer has found that threat detection has been turned on by default on a Cisco ASA. Which two security events are monitored? (Choose two.)

A.    number of times the rates were exceeded
B.    total number of malformed packets received
C.    denial of service attack occurrences
D.    packets allowed by the inspection engine
E.    concurrent NAT interface overload addresses

Answer: AC

NEW QUESTION 494
Which two values must you provide when you use a CSV file to import devices into Cisco Prime Infrastructure? (Choose two.)

A.    device model number
B.    SNMP version
C.    device serial number
D.    device IP address
E.    EtherType field

Answer: BD

NEW QUESTION 495
Which two features does DNSSEC leverage for proper functionality? (Choose two.)

A.    It uses TCP to ensure reliable delivery.
B.    It uses UDP to reduce the DNS responses time.
C.    It uses EDNS to manage the larger DNS packets it requires.
D.    It uses UDP to minimize packet size.
E.    It uses AD and DO inside UDP to reduce response time.

Answer: CE

NEW QUESTION 496
Which two unified communications protocols can be inspected for an anomaly by using the Cisco ASA 5500 Series firewall? (Choose two.)

A.    RSH
B.    SCP
C.    MGCP
D.    TFTP
E.    RTSP

Answer: CE

NEW QUESTION 497
Which purpose of MKA in a MACsec deployment is true?

A.    It encrypts traffic between switches.
B.    It transports EAP messages from access switches to the RADIUS server.
C.    It provides additional security features beyond the default SAP key exchange.
D.    It encrypts traffic between the downlink port and the endpoint of the switch.

Answer: D

NEW QUESTION 498
Due to a traffic storm on your network, two interfaces were error-disabled and both interfaces sent SNMP traps. In which two ways can the interfaces be back into service? (Choose two.)

A.    If the snmp-server enable traps command is enabled, the ports return to service automatically after 300 seconds.
B.    If EEM is configured, the ports return to service automatically in less than 300 seconds.
C.    If the administrator enters the shutdown and no shutdown commands on the interfaces.
D.    If the interfaces are configured with the error-disable detection and recovery feature, the interfaces will be returned to service automatically.
E.    If Cisco Prime is configured, it issues an SNMP set command to re-enable the ports after the preconfigured interval.

Answer: CD

NEW QUESTION 499
You need to increase the level of security for the management traffic accessing a Cisco router. You plan to enable HTTPS. Which action do you take on the router?

A.    Disable TCP port 23.
B.    Generate an RSA key.
C.    Enable SCP.
D.    Enable TLS.

Answer: D

NEW QUESTION 500
Which action do you take on a Cisco router to limit the management traffic to only one interface?

A.    Filter incoming connections by applying an extended ACL on a loopback interface.
B.    Filter incoming connections by applying a standard ACL on a SVI.
C.    Utilize the Management Plan Protection feature.
D.    Add an interface by using the management-interface command.

Answer: C

NEW QUESTION 501
……


New 300-206 exam questions from PassLeader 300-206 dumps! Welcome to download the newest PassLeader 300-206 VCE and PDF dumps: https://www.passleader.com/300-206.html (501 Q&As)

P.S. New 300-206 dumps are available on Google Drive shared by PassLeader: https://drive.google.com/open?id=0B-ob6L_QjGLpflBDRGVtd3JJR2k3ZF9sOTAyOHQ0bW1fdlJsZjFwS2xxZmx1TGVrOEdraTA