Free 300-206 sample questions
Real questions from the Security Implementing Cisco Edge Network Security Solutions (SENSS) practice bank, with the correct answer and an explanation for each one. No junk, no filler.
Try them in the simulator Same questions, with study, timed and flashcard modes.
Showing 8 of 17 free sample questions.
Which of the following would need to be created to configure an application-layer inspection of SMTP traffic operating on port 2525? A.A class-map that matches port 2525 and applying an inspect ESMTP policy-map for that class in the global inspection policyB.A policy-map that matches port 2525 and applying an inspect ESMTP class-map for that policyC.An access-list that matches on TCP port 2525 traffic and applying it on an interface with the inspect optionD.A class-map that matches port 2525 and applying it on an access-list using the inspect option
A financial institution is deploying a Cisco ASA 5500-X series firewall at the internet edge. The security policy requires that all internal hosts in the 10.10.10.0/24 subnet be hidden behind a single public IP address (203.0.113.10) when accessing the internet. Additionally, a specific internal web server (10.10.10.50) must be accessible from the internet on port 80 using the IP 203.0.113.11. The administrator observes that the web server is reachable, but internal hosts cannot access the internet. A review of the configuration shows the following: object network OBJ_INSIDE subnet 10.10.10.0 255.255.255.0 object network OBJ_WEBSERVER host 10.10.10.50 ! nat (inside,outside) source static OBJ_WEBSERVER interface service tcp 80 80 Which configuration change resolves the issue while maintaining the required access?
A network architect is designing a Layer 2 security strategy for a campus network. The design must prevent a user from connecting a rogue DHCP server to a wall jack and assigning incorrect IP addresses to other users in the same VLAN. The switch is a Cisco Catalyst 9300. Which three steps are required to implement the solution? (Select THREE)
A security engineer is configuring the Cisco ASA to integrate with a Cisco ISE server for administrative access control. The requirement is that network administrators must have full access (privilege level 15) while helpdesk staff should only have read-only access (privilege level 2). The ISE server is configured to return the Cisco-AV-Pair attribute 'shell:priv-lvl=15' for admins. Which command on the ASA ensures this attribute is honored during the authorization process?
While investigating a reported network slowdown, an administrator discovers a large volume of TCP SYN packets targeting the web server farm. The traffic appears to be spoofed. To mitigate this on the Cisco ASA, the administrator enables TCP Intercept. Which Threat Defense feature is being utilized?
A Cisco ASA is configured for Active/Standby failover. The administrator notices that the standby unit is not synchronizing the configuration and remains in a 'pseudo-standby' state. The failover link is directly connected between the two units using GigabitEthernet0/3. Which of the following is the most likely cause?
Case Study: TechSecure Inc. TechSecure Inc. is updating its edge security to support a new partner integration. The partner uses an overlapping IP address space (192.168.1.0/24) identical to TechSecure's internal R&D VLAN. To resolve this, the network architect proposes a Twice NAT solution on the Cisco ASA. The requirements are: 1. TechSecure Host A (192.168.1.50) must reach Partner Host B (192.168.1.100). 2. TechSecure Host A should initiate traffic to a 'dummy' IP 10.0.0.100, which the ASA translates to the Partner's real IP 192.168.1.100. 3. The Partner firewall sees the traffic coming from TechSecure's public IP 203.0.113.50. Which object configuration correctly defines the destination mapping objects for this Twice NAT rule?
9 more free samples are waiting
Create a free account to unlock the whole 300-206 sample bank, or get full access to all 270 practice questions in the simulator.