Free 300-206 Exam Braindumps
Implementing Cisco Edge Network Security Solutions (RETIRED) Questions 157–160 (page: 41)

Which security operations management best practice should be followed to enable appropriate network access for administrators?

  1. Provide full network access from dedicated network administration systems
  2. Configure the same management account on every network device
  3. Dedicate a separate physical or logical plane for management traffic
  4. Configure switches as terminal servers for secure device access

Answer(s): C



Which two features block traffic that is sourced from non-topological IPv6 addresses? (Choose two.)

  1. DHCPv6 Guard
  2. IPv6 Prefix Guard
  3. IPv6 RA Guard
  4. IPv6 Source Guard

Answer(s): B,D



Which three options correctly identify the Cisco ASA1000V Cloud Firewall? (Choose three.)

  1. operates at Layer 2
  2. operates at Layer 3
  3. secures tenant edge traffic
  4. secures intraswitch traffic
  5. secures data center edge traffic
  6. replaces Cisco VSG
  7. complements Cisco VSG
  8. requires Cisco VSG

Answer(s): B,C,G



Which two statements about zone-based firewalls are true? (Choose two.)

  1. More than one interface can be assigned to the same zone.
  2. Only one interface can be in a given zone.
  3. An interface can only be in one zone.
  4. An interface can be a member of multiple zones.
  5. Every device interface must be a member of a zone.

Answer(s): A,C



Viewing page 41 of 110
Viewing questions 161 - 164 out of 438 questions


Post your Comments and Discuss Cisco 300-206 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!