A purchase at GuideTorrent is the start of a service relationship rather than the end of a transaction: after your 300-206 order arrives, the team stays reachable around the clock for any Cisco Implementing Cisco Edge Network Security Solutions question that comes up.
Cisco 300-206 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Threat Defense | 25% | - Implement static/dynamic NAT/PAT - Implement ACLs - Implement botnet traffic filtering - Implement firewall features (ASA or IOS) - Describe Layer 2 mitigation techniques - Configure Layer 2 security (DHCP snooping, port security, storm control) - Describe threat detection features - Configure IP source verification - Implement object groups - Configure device hardening best practices - Describe ASA security contexts - Configure application filtering & protocol inspection |
| Topic 2: Management Services on Cisco Devices | 12% | - Configure NetFlow exporter - Implement secure logging and NTP authentication - Implement SNMPv3 views/groups/users/authentication - Describe CDP, DNS, SCP, SFTP, and DHCP security implications |
| Topic 3: Cisco Security Devices GUIs and Secured CLI Management | 25% | - Implement SSHv2, HTTPS, SNMPv3 access - Describe Cisco Prime Infrastructure and device management - Implement ASA firewall features using ASDM - Implement RBAC on ASA/IOS via CLI/ASDM |
| Topic 4: Security Components and Considerations | 12% | - Describe data center security components - Describe security operations management architectures - Describe common IPv6 security considerations - Describe collaboration security considerations |
| Topic 5: Troubleshooting, Monitoring and Reporting Tools | 10% | - Monitor firewall using packet tracer and packet capture - Analyze syslog events from ASA |
| Topic 6: Threat Defense Architectures | 16% | - Design firewall solution (high availability, zoning, modes) - Describe PVLAN usage for segregation - Implement defenses against MAC/ARP/VLAN/STP/DHCP attacks |
300-206 Exam Facts and the Service Behind Them
- Threat Defense Architectures (16%)
- Threat Defense (25%)
- Cisco Security Devices GUIs and Secured CLI Management (25%)
Cisco Implementing Cisco Edge Network Security Solutions Sample Questions:
Refer to the exhibit.
This command is used to configure the SNMP server on a Cisco router. Which option is the encryption password for the SNMP server?
- A. group-1
- B. snmpv3
- C. snmp
- D. sha
Correct Answer: B 🗳️
An engineering team is working diligently to achieve the fastest possible throughput on a Cisco ASA deployment within the data center without sacrificing high availability or flexibility. Which type of architecture accomplishes this goal?
- A. single mode, routed contexts
- B. multiple mode, routed contexts
- C. multiple mode, transparent contexts
- D. single mode, transparent contexts
Correct Answer: B 🗳️
Which two keying mechanisms are available within MACsec? (Choose two.)
- A. MKA
- B. Diffie-Hellman
- C. GDOI
- D. SAP
- E. IKE
Correct Answer: A,D 🗳️
A network engineer must manage and push configurations to a Cisco networking environment, in which 10 Cisco ASA with IPS modules reside. Which solution accomplishes this task?
- A. Cisco IPS Manager Express and pushing configurations to the IPS units
- B. Cisco Security Manager 4.5 or later and pushing configuration bundles to each of the IPS units
- C. FireSIGHT manager to bundle and push configurations to the IPS units installed on an SSD within the Cisco ASA 5500 Series ASA
- D. Cisco Adaptive Security Device Manager to push configurations to each of the IPS units
Correct Answer: C 🗳️
Which three types of multicast packets are controlled by using storm control? (Choose three.)
- A. ICMP
- B. RTP
- C. CDP
- D. RIPv2
- E. BPDU
- F. OSPF
Correct Answer: D,E,F 🗳️
Viewing page 1 out of 35 pages.
Viewing questions 1-5 out of 175 questions.
