A network printer has a DHCP server service that cannot be disabled. How can a layer 2 switch be
configured to prevent the printer from causing network issues?
A.
Remove the ip helper-address
B.
Configure a Port-ACL to block outbound TCP port 68
C.
Configure DHCP snooping
D.
Configure port-security
c
Since I recently passed the the Cisco 300-206 exam, it’s time for me to share the exam dumps I used when preparing for this exam:
QUESTION 201
Refer to the exhibit. Which statement about this access list is true?
A. This access list does not work without 6to4 NAT
B. IPv6 to IPv4 traffic permitted on the Cisco ASA by default
C. This access list is valid and works without additional configuration
D. This access list is not valid and does not work at all
E. We can pass only IPv6 to IPv6 and IPv4 to IPv4 traffic
Answer: A
Explanation:
ASA 9.0(1) code introduced the Unified ACL for IPv4 and IPv6. ACLs now support IPv4 and IPv6 addresses. You can even specify a mix of IPv4 and IPv6 addresses for the source and destination. The any keyword was changed to represent IPv4 and IPv6 traffic. The any4 and any6 keywords were added to represent IPv4-only and IPv6-only traffic, respectively. The IPv6-specific ACLs are deprecated. Existing IPv6 ACLs are migrated to extended ACLs.
QUESTION 202
Which option must be configured on a transparent Cisco ASA adaptive security appliance for it to be managed over Layer 3 networks?
A. Static routes
B. Routed interface
C. Security context
D. BVI
Answer: D
QUESTION 203
Which statement about Dynamic ARP Inspection is true ?
A. In a typical network, you make all ports as trusted expect for the ports connection to switches , which are untrusted
B. DAI associates a trust state with each switch
C. DAI determines the validity of an ARP packet based on valid IP to MAC address binding from the DHCP snooping database
D. DAI intercepts all ARP requests and responses on trusted ports only
E. DAI cannot drop invalid ARP packets
Answer: C
QUESTION 204
Which command is the first that you enter to check whether or not ASDM is installed on the ASA?
A. Show ip
B. Show running-config asdm
C. Show running-config boot
D. Show version
E. Show route
Answer: B
QUESTION 205
Which option is the Cisco ASA on-box graphical management solution?
A. SSH
B. ASDM
C. Console
D. CSM
Answer: B
QUESTION 206
Which action is needed to set up SSH on the Cisco ASA firewall?
A. Create an ACL to aloew the SSH traffic to the Cisco ASA.
B. Configure DHCP for the client that will connect via SSH.
C. Generate a crypto key
D. Specify the SSH version level as either 1 or 2.
E. Enable the HTTP server to allow authentication.
Answer: C
QUESTION 207
At which layer does MACsecprovide encryption?
A. Layer 1
B. Layer 2
C. Layer 3
D. Layer 4
Answer: B
QUESTION 208
Which command is used to disable Cisco Discovery Protocol globally on a router?
A. Cdp disable
B. No cdp enable
C. No cdp
D. No cdp run
Answer: D
QUESTION 209
Refer to the exhibit. This command is used to configure the SNMP server on a Cisco router.
Which option is the encryption password for the SNMP server?
A. sha
B. snmp
C. group-1
D. snmpv3
Answer: D
QUESTION 210
……
I have uploaded all the real questions of 300-206 exam to my Google Drive: https://drive.google.com/open?id=0B3Syig5i8gpDQ0xqNGttYzZGYk0
Welcome to download them freely!