30 04 2014

QUESTION 61
Which URL matches the regex statement “http”*/”www.cisco.com/”*[^E]”xe”?

A.    https://www.cisco.com/ftp/ios/tftpserver.exe
B.    https://cisco.com/ftp/ios/tftpserver.exe
C.    http:/www.cisco.com/ftp/ios/tftpserver.Exe
D.    https:/www.cisco.com/ftp/ios/tftpserver.EXE

Answer: A

QUESTION 62
Which two statements about Cisco IOS Firewall are true? (Choose two.)

A.    It provides stateful packet inspection.
B.    It provides faster processing of packets than Cisco ASA devices provide.
C.    It provides protocol-conformance checks against traffic.
D.    It eliminates the need to secure routers and switches throughout the network.
E.    It eliminates the need to secure host machines throughout the network.

Answer: AC

QUESTION 63
Which two VPN types can you monitor and control with Cisco Prime Security Manager? (Choose two.)

A.    AnyConnect SSL
B.    site-to-site
C.    clientless SSL
D.    IPsec remote-access

Answer: AB

QUESTION 64
What are three attributes that can be applied to a user account with RBAC? (Choose three.)

A.    domain
B.    password
C.    ACE tag
D.    user roles
E.    VDC group tag
F.    expiry date

Answer: BDF

QUESTION 65
Which command is used to nest objects in a pre-existing group?

A.    object-group
B.    network group-object
C.    object-group network
D.    group-object

Answer: D

QUESTION 66
Which threat-detection feature is used to keep track of suspected attackers who create connections to too many hosts or ports?

A.    complex threat detection
B.    scanning threat detection
C.    basic threat detection
D.    advanced threat detection

Answer: B

QUESTION 67
What is the default behavior of an access list on the Cisco ASA security appliance?

A.    It will permit or deny traffic based on the access-list criteria.
B.    It will permit or deny all traffic on a specified interface.
C.    An access group must be configured before the access list will take effect for traffic control.
D.    It will allow all traffic.

Answer: C

QUESTION 68
What is the default behavior of NAT control on Cisco ASA Software Version 8.3?

A.    NAT control has been deprecated on Cisco ASA Software Version 8.3.
B.    It will prevent traffic from traversing from one enclave to the next without proper access configuration.
C.    It will allow traffic to traverse from one enclave to the next without proper access configuration.
D.    It will deny all traffic.

Answer: A

QUESTION 69
Which three options are hardening techniques for Cisco IOS routers? (Choose three.)

A.    limiting access to infrastructure with access control lists
B.    enabling service password recovery
C.    using SSH whenever possible
D.    encrypting the service password
E.    using Telnet whenever possible
F.    enabling DHCP snooping

Answer: ACD

QUESTION 70
What command alters the SSL ciphers used by the Cisco Email Security Appliance for TLS sessions and HTTPS access?

A.    sslconfig
B.    sslciphers
C.    tlsconifg
D.    certconfig

Answer: A

If you want to pass the Cisco 300-206 Exam sucessfully, recommend to read latest Cisco 300-206 Dump full version.

300-206 Questions and Answers, Cisco 300-206 Dumps, Cisco 300-206 Exam, Cisco 300-206 Exam Questions

Official 2014 Latest Cisco 300-206 Dump Free Download(51-60)! Official 2014 Latest Cisco 300-206 Dump Free Download(71-80)!