Certification Exam Prep Questions For
(300-206) Implementing Cisco Edge Network Security Solutions (SENSS)
QuickStart is now offering assessment questions for Implementing Cisco Edge Network Security Solutions (SENSS) (300-206). Whether you are deciding which exam to sign up for, or simply want to practice the materials necessary to complete certification for this course, we have provided a practice assessment to better aid in certification. 100% of the questions are real questions; from a recent version of the test you will take for Implementing Cisco Edge Network Security Solutions (SENSS) (300-206).
Name the three commands that can be used to harden a switch? (Choose three).
- A. switch(config-if)# spanning-tree bpdufilter enable
-
Incorrect.
- B. switch(config)# errdisable recovery interval 900
-
Incorrect.
- C. switch(config)# ip DHCP snooping
-
Correct!
- D. switch(config-if)# spanning-tree guard root
-
Correct!
- E. switch(config-if)# no cdp enable
-
Correct!
- F. switch(config-if)# spanning-tree bpduguard disable
-
Incorrect.
Choose the three features associated with Cisco ASA 1000V? (Choose three).
- A. cloning the Cisco ASA 1000V
-
Correct!
- B. IPv6
-
Incorrect.
- C. dynamic routing
-
Incorrect.
- D. the Cisco VNMC policy agent
-
Correct!
- E. QoS
-
Incorrect.
- F. Active/standby failover
-
Correct!
If there are only a few licenses of Cisco ASA 1000V, what is the behaviour?
- A. It drops complete traffic.
-
Incorrect.
- B. It drops the entire inside-to-outside packets.
-
Incorrect.
- C. It drops the entire outside-to-inside packets.
-
Incorrect.
A network administrator develops an ASA-CX administrative user account by following the given parameters:
• The user is responsible for configuring security policies on all network devices.
• The user requires read-write access regarding policies
• The account possesses no more rights than essential for the job.
What is the role assigned to the user by the administrator?
- A. Administrator
-
Incorrect.
- B. Security administrator
-
Correct!
- C. Root Administrator
-
Incorrect.
- D. System administrator
-
Incorrect.
- E. Exec administrator
-
Incorrect.
Name the two web browsers that are supported for the Cisco ISE GUI? (Choose two)
- A. HTTPS-enabled Mozilla Firefox version 3.x
-
Correct!
- B. Netscape Navigator version 9
-
Incorrect.
- E. Google Chrome (all versions)
-
Incorrect.
Considering the Cisco ASA standby/active failover (default), how many failures of the monitored interface will cause the failover?
Which of the statement regarding SNMP support regarding the Cisco ASA appliance is actually true?
Which of the statement regarding Cisco ASA multicast routing support is actually true?
- B. The Cisco ASA appliance facilitates DVMRP and PIM.
-
Incorrect.
How many interfaces are supported by a Cisco ASA bridge group and how many bridge groups are supported by a Cisco ASA appliance support?
Name the addresses that are considered as ‘ambiguous addresses’ and also put on the Cisco ASA botnet traffic filter option grey list?
- A. addresses that are unidentified
-
Incorrect.
For what purpose does the Cisco ASA CLI command (aaa authentication match) used?
For which purpose is the Cisco ASA CLI command aaa authentication match used?
A NetFlow configuration is performed by a network engineer to sample one out of 100 packets present on a fa0/0 interface of the router. Name the configuration that would enable sampling, considering that NetFlow is configured already and also running on the fa0/0 interface of the router.
- D. ip flow-export source fas0e0 one-out-of 100
-
Incorrect.
Considering the Cisco Web Security Appliance, what is the log level by default?
Name the command that sets the source IP address of a device’s NetFlow exports?
- A. ip source flow-export
-
Incorrect.
- B. ip NetFlow-export source
-
Incorrect.
- C. ip source NetFlow-export
-
Incorrect.
- D. ip flow-export source
-
Correct!
Which two features of the SNMPv3 make sure that the SNMP packets are sent securely? (Select two).
- A. host authorization
-
Incorrect.
- B. authentication
-
Correct!
- C. encryption
-
Correct!
- D. compression
-
Incorrect.
Which of the three logging methods are fully supported by a Cisco router? (Select three).
- A. console logging
-
Correct!
- B. TACACS+ logging
-
Incorrect.
- C. terminal logging
-
Correct!
- D. syslog logging
-
Correct!
For NTP parameters of a Cisco device, which of the three options are actually default settings? (Choose three)
- A. NTP authentication is allowed.
-
Incorrect.
- B. NTP authentication is restricted.
-
Correct!
- C. NTP logging is enabled.
-
Incorrect.
- D. NTP logging is deactivated.
-
Correct!
- E. NTP access is enabled.
-
Correct!
For TLS proxy, a Cisco ASA is properly configured. When does the security appliance should force remote IP phones that are connecting to the proxy (phone) using the internet to be in a secured mode?
- D. When the Cisco ASA is configured for IPSec VPN
-
Incorrect.
As you configure multiple Cisco ASA appliances cluster, which of the two features are actually supported? (Choose two)
- A. NAT
-
Correct!
- B. SSL remote access VPN
-
Incorrect.
- C. dynamic routing
-
Incorrect.
- D. IPSec remote access VPN
-
Correct!
Which of the two device types can be managed by Cisco Prime Security Manager in Multiple Device modes? (Select two).
Considering Cisco Nexus 1000V, name the technology that would provide forwarding-plane abstraction in order to facilitate the network services of Layer 2 to Layer 7?
- A. Virtual Service Node
-
Incorrect.
- B. Virtual Service Gateway
-
Incorrect.
- C. Virtual Service Agent
-
Incorrect.
- D. Virtual Service Data Path
-
Correct!
On a Cisco ASA 1000V firewall, name the interface on which a security profile should be applied when a VM is sitting behind it?
You configure a Cisco IOS Firewall on some WAN router that operates as a TRP (Trusted Relay Point) in some voice network. Which feature needs to be configured in order to open data-channel pinholes regarding voice packets which are sourced from a Trusted Relay Point within the WAN?
In case you face problems while logging in to a 4.4 web server of the Cisco Security Manager or client or when backing up the database, which of the accounts is most likely modified incorrectly?
- A. admin (the default administrator account)
-
Incorrect.
- B. causer (the default service account)
-
Correct!
- C. user (the default user account)
-
Incorrect.
- D. guest (the default guest account)
-
Incorrect.
Which component is required by the Cisco ASDM on the Cisco PIX security appliance or the host Cisco ASA 5500 Series?
- A. a 3DES or DES license
-
Correct!
- B. a NAT policy server
-
Incorrect.
- C. a SQL database
-
Incorrect.
- D. a Kerberos key
-
Incorrect.
- Home
- Practice Exam - Implementing Cisco Edge Network Security
Practice Exam - Implementing Cisco Edge Network Security
QuickStart is now offering you assessment questions to better aid in certification. 100% of the questions are real questions from a recent version of the test you will take.
QuickStart is now offering you assessment questions to better aid in certification. 100% of the questions are real questions from a recent version of the test you will take.
More Information:
- Learning Style: On Demand
- Learning Style: Practice Exam
- Difficulty: Beginner
- Course Duration: 1 Hour
- Course Info: Download PDF
- Certificate: See Sample
Contact a Learning Consultant
Need Training for 5 or More People?
Customized to your team's need:
- Annual Subscriptions
- Private Training
- Flexible Pricing
- Enterprise LMS
- Dedicated Customer Success Manager
Course Information