300-206 Exam Questions - Online Test

300-206 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

we provide Real Cisco ccnp security senss 300 206 official cert guide pdf exam prep which are the best for clearing cisco 300 206 test, and to get certified by Cisco Implementing Cisco Edge Network Security Solutions. The ccnp security senss 300 206 official cert guide pdf Questions & Answers covers all the knowledge points of the real cisco 300 206 exam. Crack your Cisco 300 206 dumps Exam with latest dumps, guaranteed!

Q41. IPv6 addresses in an organization's network are assigned using Stateless Address Autoconfiguration. What is a security concern of using SLAAC for IPv6 address assignment? 

A. Man-In-The-Middle attacks or traffic interception using spoofed IPv6 Router Advertisements 

B. Smurf or amplification attacks using spoofed IPv6 ICMP Neighbor Solicitations 

C. Denial of service attacks using TCP SYN floods 

D. Denial of Service attacks using spoofed IPv6 Router Solicitations 

Answer: A 

Q42. At which layer does MACsec provide encryption? 

A. Layer 1 

B. Layer 2 

C. Layer 3 

D. Layer 4 

Answer: B 

Q43. Which statement about Cisco IPS Manager Express is true? 

A. It provides basic device management for large-scale deployments. 

B. It provides a GUI for configuring IPS sensors and security modules. 

C. It enables communication with Cisco ASA devices that have no administrative access. 

D. It provides greater security than simple ACLs. 

Answer: B 

Q44. Refer to the exhibit. Which command can produce this packet tracer output on a firewall? 

A. packet-tracer input INSIDE tcp 192.168.1.100 88 192.168.2.200 3028 

B. packet-tracer output INSIDE tcp 192.168.1.100 88 192.168.2.200 3028 

C. packet-tracer input INSIDE tcp 192.168.2.200 3028 192.168.1.100 88 

D. packet-tracer output INSIDE tcp 192.168.2.200 3028 192.168.1.100 88 

Answer: A 

Q45. The Cisco Email Security Appliance can be managed with both local and external users of different privilege levels. What three external modes of authentication are supported? (Choose three.) 

A. LDAP authentication 

B. RADIUS Authentication 

C. TACAS 

D. SSH host keys 

E. Common Access Card Authentication 

F. RSA Single use tokens 

Answer: A,B,D 

Q46. Which option lists cloud deployment models? 

A. Private, public, hybrid, shared 

B. Private, public, hybrid 

C. IaaS, PaaS, SaaS 

D. Private, public, hybrid, community 

Answer: D 

Explanation: https://www.ibm.com/developerworks/community/blogs/722f6200-f4ca-4eb3-9d64-8d2b58b2d4e8/entry/4_Types_of_Cloud_Computing_Deployment_Model_You_Need_to_K now1 ?lang=en 

Q47. Which policy map action makes a Cisco router behave as a stateful firewall for matching traffic? 

A. Log 

B. Inspect 

C. Permit 

D. Deny 

Answer: B 

Q48. Refer to the exhibit. 

What traffic is being captured by the Cisco ASA adaptive security appliance? 

A. UDP traffic sourced from host 10.10.0.12 on port 80 

B. TCP traffic destined to host 10.10.0.12 on port 80 

C. TCP traffic sourced from host 10.10.0.12 on port 80 

D. UDP traffic destined to host 10.10.0.12 on port 80 

Answer: C 

Q49. What are the three types of private VLAN ports? (Choose three.) 

A. promiscuous 

B. isolated 

C. community 

D. primary 

E. secondary 

F. trunk 

Answer: A,B,C 

Q50. Which three statements about private VLANs are true? (Choose three.) 

A. Isolated ports can talk to promiscuous and community ports. 

B. Promiscuous ports can talk to isolated and community ports. 

C. Private VLANs run over VLAN Trunking Protocol in client mode. 

D. Private VLANS run over VLAN Trunking Protocol in transparent mode. 

E. Community ports can talk to each other as well as the promiscuous port. 

F. Primary, secondary, and tertiary VLANs are required for private VLAN implementation. 

Answer: B,D,E