Free 300-206 Exam Braindumps
Implementing Cisco Edge Network Security Solutions (RETIRED) Questions 173–176 (page: 45)

Which statement describes the correct steps to enable Botnet Traffic Filtering on a Cisco ASA version 9.0 transparent-mode firewall with an active Botnet Traffic Filtering license?

  1. Enable DNS snooping, traffic classification, and actions.
  2. Botnet Traffic Filtering is not supported in transparent mode.
  3. Enable the use of the dynamic database, enable DNS snooping, traffic classification, and actions.
  4. Enable the use of dynamic database, enable traffic classification and actions.

Answer(s): C



Which Cisco switch technology prevents traffic on a LAN from being disrupted by a broadcast, multicast, or unicast flood on a port?

  1. port security
  2. storm control
  3. dynamic ARP inspection
  4. BPDU guard
  5. root guard
  6. dot1x

Answer(s): B



You are a security engineer at a large multinational retailer. Your Chief Information Officer recently attended a security conference and has asked you to secure the network infrastructure from VLAN hopping. Which statement describes how VLAN hopping can be avoided?

  1. There is no such thing as VLAN hopping because VLANs are completely isolated.
  2. VLAN hopping can be avoided by using IEEE 802.1X to dynamically assign the access VLAN to all endpoints and setting the default access VLAN to an unused VLAN ID.
  3. VLAN hopping is avoided by configuring the native (untagged) VLAN on both sides of an ISL trunk to an unused VLAN ID.
  4. VLAN hopping is avoided by configuring the native (untagged) VLAN on both sides of an IEEE 802.1Q trunk to an unused VLAN I

Answer(s): D



You are the administrator of a Cisco ASA 9.0 firewall and have been tasked with ensuring that the Firewall Admins Active Directory group has full access to the ASA configuration. The Firewall Operators Active Directory group should have a more limited level of access.
Which statement describes how to set these access levels?

  1. Use Cisco Directory Agent to configure the Firewall Admins group to have privilege level 15 access. Alsoconfigure the Firewall Operators group to have privilege level 6 access.
  2. Use TACACS+ for Authentication and Authorization into the Cisco ASA CLI, with ACS as the AAA server.
    Configure ACS CLI command authorization sets for the Firewall Operators group.
    Configure level 15 access to be assigned to members of the Firewall Admins group.
  3. Use RADIUS for Authentication and Authorization into the Cisco ASA CLI, with ACS as the AAA server.
    Configure ACS CLI command authorization sets for the Firewall Operators group.
    Configure level 15 access to be assigned to members of the Firewall Admins group.
  4. Active Directory Group membership cannot be used as a determining factor for accessing the Cisco ASACLI.

Answer(s): B



Viewing page 45 of 110
Viewing questions 177 - 180 out of 438 questions


Post your Comments and Discuss Cisco 300-206 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!