Cisco 300-206 Certification Practice Questions & Answers

Question 6 of 368

Which threat-detection feature is used to keep track of suspected attackers who create connections to too many hosts or ports?

A.

complex threat detection

B.

scanning threat detection

C.

basic threat detection

D.

advanced threat detection

Question 7 of 368

What is the default behavior of an access list on the Cisco ASA security appliance?

A.

It will permit or deny traffic based on the access-list criteria.

B.

It will permit or deny all traffic on a specified interface.

C.

An access group must be configured before the access list will take effect for traffic control.

D.

It will allow all traffic.

Question 8 of 368

What is the default behavior of NAT control on Cisco ASA Software Version 8.3?

A.

NAT control has been deprecated on Cisco ASA Software Version 8.3.

B.

It will prevent traffic from traversing from one enclave to the next without proper access configuration.

C.

It will allow traffic to traverse from one enclave to the next without proper access configuration.

D.

It will deny all traffic.

Question 9 of 368

Which three options are hardening techniques for Cisco IOS routers? (Choose three.)

A.

limiting access to infrastructure with access control lists

B.

enabling service password recovery

C.

using SSH whenever possible

D.

encrypting the service password

E.

using Telnet whenever possible

F.

enabling DHCP snooping

Question 10 of 368

Which three commands can be used to harden a switch? (Choose three.)

A.

switch(config-if)# spanning-tree bpdufilter enable

B.

switch(config)# ip dhcp snooping

C.

switch(config)# errdisable recovery interval 900

D.

switch(config-if)# spanning-tree guard root

E.

switch(config-if)# spanning-tree bpduguard disable

F.

switch(config-if)# no cdp enable