Online Access Free 300-206 Practice Test

An engineer must secure a current monitoring environment by using the strongest encryption allowed within SNMPv3 configuration. Which two methods meet this requirement? (Choose two.)

• A.MD5
• B.AES
• C.DES
• D.RSA-SIG
• E.3DES

An engineer wants to ensure that a multi-context Cisco ASA determines the proper context to send a packet.
Which two classification criteria must be unique for each context for this determination to occur? (Choose two.)

• A.MAC addresses
• B.interfaces
• C.Session state
• D.ARP table
• E.transparent forwarding

A firewall administrator must write a short script for network operations that will login to all Cisco ASA firewalls and check that the current running version is compliant with company policy. The administrator must first configure a restricted local username on each of the Cisco ASA firewalls so that the current running version can be validated. Which configuration command provides the least access in order to perform this function?

• A.username version user password Cisco
• B.username version user password Cisco privilege 15
• C.username version user password Cisco privilege 2
• D.username version user password Cisco privilege 0

An enterprise is hosting an application that opens a secondary UDP port. The initial session on a well-known port is used to negotiate the secondary dynamically assigned port. Which feature on Cisco ASA monitors sessions to identify the dynamic port assignments and permits data exchange on these ports?

• A.Allow Any
• B.High & Low Security level
• C.Protocol Inspection
• D.NAT

A user is having trouble connecting to websites on the Internet. The network engineer proposes configuring a packet capture that captures only the HTTP response traffic on the Cisco Adaptive Security Appliance between the user's workstation and Internet. If the user's workstation IP address is 10.0.0.101, which ACE is needed to achieve this capture?

• A.access-list capture permit tcp any eq 80 host 10.0.0.101
• B.access-list capture permit tcp any host 10.0.0.101 eq 80
• C.access-list capture permit tcp host 10.0.0.101 eq 80 any
• D.access-list capture permit tcp host 10.0.0.101 any eq 80