support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Cisco
  4. 300-206

Free 300-206 Exam Braindumps
Implementing Cisco Edge Network Security Solutions (RETIRED) Questions 145–148 (page: 38)

Page 38 of 110
PDF with 438 Questions

Which two statements about Cisco IDS are true? (Choose two.)

  1. It is preferred for detection-only deployment.
  2. It is used for installations that require strong network-based protection and that include sensor tuning.
  3. It is used to boost sensor sensitivity at the expense of false positives.
  4. It is used to monitor critical systems and to avoid false positives that block traffic.
  5. It is used primarily to inspect egress traffic, to filter outgoing threats.

Answer(s): A,D



What are two reasons for implementing NIPS at enterprise Internet edges? (Choose two.)

  1. Internet edges typically have a lower volume of traffic and threats are easier to detect.
  2. Internet edges typically have a higher volume of traffic and threats are more difficult to detect.
  3. Internet edges provide connectivity to the Internet and other external networks.
  4. Internet edges are exposed to a larger array of threats.
  5. NIPS is more optimally designed for enterprise Internet edges than for internal network configurations.

Answer(s): C,D



Which statement about the Cisco ASA configuration is true?

  1. All input traffic on the inside interface is denied by the global ACL.
  2. All input and output traffic on the outside interface is denied by the global ACL.
  3. ICMP echo-request traffic is permitted from the inside to the outside, and ICMP echo-reply will be permitted from the outside back to inside.
  4. HTTP inspection is enabled in the global policy.
  5. Traffic between two hosts connected to the same interface is permitted.

Answer(s): B



In the default global policy, which traffic is matched for inspections by default?

  1. match any
  2. match default-inspection-traffic
  3. match access-list
  4. match port
  5. match class-default

Answer(s): B



  PDF
Viewing page 38 of 110
Viewing questions 149 - 152 out of 438 questions


Post your Comments and Discuss Cisco 300-206 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!