Cisco 300-206 Exam PDF Syllabus

Question No. 1

When configuring packet-tracer command from CLI, what is the first option that you set?

• A. source IP address
• B. destination IP address
• C. interface
• D. protocol (ip, tcp, udp)

Question No. 2

Which statement about Cisco ASA NetFlow v9 (NSEL) is true?

• A. NSEL events match all traffic classes in parallel
• B. NSEL is has a time interval locked at 20 seconds and is not user configurable
• C. NSEL tracks flow-create, flow-teardown, and flow-denied events and generates appropriate NSEL datarecords
• D. You cannot disable syslog messages that have become redundant because of NSEL
• E. NSEL tracks the flow continuously and provides updates every 10 second
• F. NSEL provides stateless IP flow tracking that exports all record od a specific flow

Question No. 3

Which two mandatory policies are needed to support a regular IPsec VPN in a Cisco Security Manager

environment? (Choose two.)

• A. GRE modes
• B. IKE proposal
• C. group encryption
• D. server load balance

Question No. 4

Which two statements about managing ACLs with ASDM are true? (Choose two)

• A. It can manage interface access rules and global access rules.
• B. It enables global access rules to override interface access rules.
• C. It can add new access rules before and after existing access rules.
• D. It can import and export existing access lists.
• E. It can define interface access rules without them to an individual interface
• F. It can delete access lists without deleting individual access rules.

Question No. 5

Which threat level is the default used in the Botnet Traffic Filter?

• A. high
• B. moderate to very-high
• C. high to very-high
• D. very-high

Question No. 6

A network engineer must manage and push configurations to a Cisco networking environment, in which 10 Cisco ASA with IPS modules reside. Which solution accomplishes this task?

• A. Cisco Adaptive Security Device Manager to push configurations to each of the IPS units
• B. FireSIGHT manager to bundle and push configurations to the IPS units installed on an SSD within the Cisco ASA 5500 Series ASA
• C. Cisco Security Manager 4.5 or later and pushing configuration bundles to each of the IPS units
• D. Cisco IPS Manager Express and pushing configurations to the IPS units

Question No. 7

A web server has been configured to operate on port 1521. The web server traffic is passing through an ASA with default application inspection configured. Which application inspection affects the web server traffic?

• A. HTTP
• B. MSCP
• C. HTTPS
• D. SQL *Net

Question No. 8

Which Cisco Security Manager form factor is recommended for deployments with fewer than 25 devices?

• A. only Cisco Security Manager Standard
• B. only Cisco Security Manager Professional
• C. only Cisco Security Manager UCS Server Bundle
• D. both Cisco Security Manager Standard and Cisco Security Manager Professional

Question No. 9

An engineer has successfully captured data on an ASA (ip address 10.10.10.1) and wants to download the file to analyze offline. The filename is capin.

Which option must the engineer enter to accomplish this task?

• A. https://10.10.10.1/admin/capture/capin
• B. http://10.10.10.1/admin/capture/capin/pcap
• C. https://10.10.10.1/admin/capture/capin/pcap
• D. http://10.10.10.1/admin/capture/capin

Question No. 10

Which ASA feature is used to keep track of suspected attackers who create connections to too many hosts or ports?

• A. complex threat detection
• B. scanning threat detection
• C. basic threat detection
• D. advanced threat detection