CCNP Security Implementing Cisco Edge Network Security Solutions (SENSS)

Here you have the best Cisco 300-206 practice exam questions

You have 368 total questions to study from
Each page has 5 questions, making a total of 74 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on December 14, 2025
This site is not affiliated with or endorsed by Cisco.

Question 1 of 368

All 30 users on a single floor of a building are complaining about network slowness. After investigating the access switch, the network administrator notices that the MAC address table is full (10,000 entries) and all traffic is being flooded out of every port. Which action can the administrator take to prevent this from occurring?

Configure port-security to limit the number of mac-addresses allowed on each port

Upgrade the switch to one that can handle 20,000 entries

Configure private-vlans to prevent hosts from communicating with one another

Enable storm-control to limit the traffic rate

Configure a VACL to block all IP traffic except traffic to and from that subnet

Correct Answer: A

Question 2 of 368

A network printer has a DHCP server service that cannot be disabled. How can a layer 2 switch be configured to prevent the printer from causing network issues?

Remove the ip helper-address

Configure a Port-ACL to block outbound TCP port 68

Configure DHCP snooping

Configure port-security

Correct Answer: C

Question 3 of 368

A switch is being configured at a new location that uses statically assigned IP addresses. Which will ensure that ARP inspection works as expected?

Configure the 'no-dhcp' keyword at the end of the ip arp inspection command

Enable static arp inspection using the command 'ip arp inspection static vlan vlan-number

Configure an arp access-list and apply it to the ip arp inspection command

Enable port security

Correct Answer: C

Question 4 of 368

Which of the following would need to be created to configure an application-layer inspection of SMTP traffic operating on port 2525?

A class-map that matches port 2525 and applying an inspect ESMTP policy-map for that class in the global inspection policy

A policy-map that matches port 2525 and applying an inspect ESMTP class-map for that policy

An access-list that matches on TCP port 2525 traffic and applying it on an interface with the inspect option

A class-map that matches port 2525 and applying it on an access-list using the inspect option

Correct Answer: A

Question 5 of 368

Which command is used to nest objects in a pre-existing group?

object-group

network group-object

object-group network

group-object

Correct Answer: D