Free 300-206 Exam braindumps download (300-206 exam dumps Free)

QUESTION: 153

Which statement about how the Cisco ASA supports SNMP is true?

All SNMFV3 traffic on the inside interface will be denied by the global ACL
The Cisco ASA and ASASM provide support for network monitoring using SNMP Versions 1, 2c, and 3, butdo not support the use of all three versions simultaneously.
The Cisco ASA and ASASM have an SNMP agent that notifies designated management , . stations if events occur that are predefined to require a notification, for example, when a link in the network goes up or down.
SNMPv3 is enabled by default and SNMP v1 and 2c are disabled by default.
SNMPv3 is more secure because it uses SSH as the transport mechanism.

Answer(s): C

Explanation:

This can be verified by this ASDM screen shot:

SNMP users have a specified username, a group to which the user belongs, authentication password, encryption password, and authentication and encryption algorithms to use. The authentication algorithm options are MD5 and SHA.
The encryption algorithm options are DES, 3DES, andAES (which is available in 128, 192, and 256 versions). When you create a user, with which option must you associate it?

an SNMP group
at least one interface
the SNMP inspection in the global_policy
at least two interfaces

Answer(s): A

Explanation:

This can be verified via the ASDM screen shot shown here

Show Answer Next Question

QUESTION: 155

An SNMP host is an IP address to which SNMP notifications and traps are sent. To configure SNMFV3 hosts, which option must you configure in addition to the target IP address?

the Cisco ASA as a DHCP server, so the SNMFV3 host can obtain an IP address
a username, because traps are only sent to a configured user
SSH, so the user can connect to the Cisco ASA
the Cisco ASA with a dedicated interface only for SNMP, to process the SNMP host traffic.

Answer(s): B