It is impossible to pass Cisco ccnp security senss 300 206 official cert guide exam without any help in the short term. Come to Pass4sure soon and find the most advanced, correct and guaranteed Cisco 300 206 dumps practice questions. You will get a surprising result by our Renew Implementing Cisco Edge Network Security Solutions practice guides.

Q1. Which two SNMPv3 features ensure that SNMP packets have been sent securely? (Choose two.) 

A. host authorization 

B. authentication 

C. encryption 

D. compression 

Answer: B,C 


Q2. A network administrator is creating an ASA-CX administrative user account with the following parameters: 

The user will be responsible for configuring security policies on network devices. 

The user needs read-write access to policies. 

The account has no more rights than necessary for the job. 

What role will be assigned to the user? 

A. Administrator 

B. Security administrator 

C. System administrator 

D. Root Administrator 

E. Exec administrator 

Answer:


Q3. When a traffic storm threshold occurs on a port, into which state can traffic storm control put the port? 

A. Disabled 

B. Err-disabled 

C. Disconnected 

D. Blocked 

E. Connected 

Answer:


Q4. Which function does DNSSEC provide in a DNS infrastructure? 

A. It authenticates stored information. 

B. It authorizes stored information. 

C. It encrypts stored information. 

D. It logs stored security information. 

Answer:


Q5. Refer to the exhibit. 

What traffic is being captured by the Cisco ASA adaptive security appliance? 

A. UDP traffic sourced from host 10.10.0.12 on port 80 

B. TCP traffic destined to host 10.10.0.12 on port 80 

C. TCP traffic sourced from host 10.10.0.12 on port 80 

D. UDP traffic destined to host 10.10.0.12 on port 80 

Answer:


Q6. You are the administrator of a Cisco ASA 9.0 firewall and have been tasked with ensuring that the Firewall Admins Active Directory group has full access to the ASA configuration. The Firewall Operators Active Directory group should have a more limited level of access. 

Which statement describes how to set these access levels? 

A. Use Cisco Directory Agent to configure the Firewall Admins group to have privilege level 15 access. Also configure the Firewall Operators group to have privilege level 6 access. 

B. Use TACACS+ for Authentication and Authorization into the Cisco ASA CLI, with ACS as the AAA server. Configure ACS CLI command authorization sets for the Firewall Operators group. Configure level 15 access to be assigned to members of the Firewall Admins group. 

C. Use RADIUS for Authentication and Authorization into the Cisco ASA CLI, with ACS as the AAA server. Configure ACS CLI command authorization sets for the Firewall Operators group. Configure level 15 access to be assigned to members of the Firewall Admins group. 

D. Active Directory Group membership cannot be used as a determining factor for accessing the Cisco ASA CLI. 

Answer:


Q7. Which two options are purposes of the packet-tracer command? (Choose two.) 

A. to filter and monitor ingress traffic to a switch 

B. to configure an interface-specific packet trace 

C. to simulate network traffic through a data path 

D. to debug packet drops in a production network 

E. to automatically correct an ACL entry in an ASA 

Answer: C,D 


Q8. What are three ways to add devices in Cisco Prime Infrastructure? (Choose three.) 

A. Use an automated process. 

B. Import devices from a CSV file. 

C. Add devices manually. 

D. Use RADIUS. 

E. Use the Access Control Server. 

F. Use Cisco Security Manager. 

Answer: A,B,C 


Q9. What is the result of the default ip ssh server authenticate user command? 

A. It enables the public key, keyboard, and password authentication methods. B. It enables the public key authentication method only. 

C. It enables the keyboard authentication method only. 

D. It enables the password authentication method only. 

Answer:


Q10. Which two options are private-VLAN secondary VLAN types? (Choose two) 

A. Isolated 

B. Secured 

C. Community 

D. Common 

E. Segregated 

Answer: A,C 

Explanation: 

http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/configuration/guid e/cli/ CLIConfigurationGuide/PrivateVLANs.html