- Home
- Cisco
- Implementing Cisco Edge Network Security Solutions
- Cisco.300-206.v2018-09-27.q172
- Question 57
Valid 300-206 Dumps shared by ExamDiscuss.com for Helping Passing 300-206 Exam! ExamDiscuss.com now offer the newest 300-206 exam dumps, the ExamDiscuss.com 300-206 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 300-206 dumps with Test Engine here:
Access 300-206 Dumps Premium Version
(175 Q&As Dumps, 35%OFF Special Discount Code: freecram)
<< Prev Question Next Question >>
Question 57/172
Which two options are protocols and tools that are used by the management plane when discussing Cisco ASA general management plane hardening? (Choose two.)
Correct Answer: B,C
Explanation/Reference:
Explanation:
General Management Plane Hardening
The purpose of the management plane is to provide the capability to access, configure, and manage a device and to monitor its operations and the network on which it is deployed. The management plane receives and sends traffic for these functions. One must secure both the management plane and control plane of a device because operations of the control plane directly affect operations of the management plane. The following is a list of common protocols and tools used by the management plane:
SNMP
Telnet
SSH
FTP
TFTP
SCP
TACACS+
RADIUS
NetFlow
Network Time Protocol (NTP)
Syslog
Reference: http://www.cisco.com/web/about/security/intelligence/firewall-best-practices.html
Explanation:
General Management Plane Hardening
The purpose of the management plane is to provide the capability to access, configure, and manage a device and to monitor its operations and the network on which it is deployed. The management plane receives and sends traffic for these functions. One must secure both the management plane and control plane of a device because operations of the control plane directly affect operations of the management plane. The following is a list of common protocols and tools used by the management plane:
SNMP
Telnet
SSH
FTP
TFTP
SCP
TACACS+
RADIUS
NetFlow
Network Time Protocol (NTP)
Syslog
Reference: http://www.cisco.com/web/about/security/intelligence/firewall-best-practices.html
- Question List (172q)
- Question 1: Which product can manage licenses, updates, and a single sig...
- Question 2: Which addresses are considered "ambiguous addresses" and are...
- Question 3: An administrator is deploying port-security to restrict traf...
- Question 4: A network engineer is asked to configure NetFlow to sample o...
- Question 5: Which three statements about transparent firewall are true? ...
- Question 6: A Cisco ASA is configured for TLS proxy. When should the sec...
- Question 7: Which option describes the enhancements that SNMPv3 adds ove...
- Question 8: Which statement about Cisco ASA multicast routing support is...
- Question 9: Which statement about traffic storm control behavior is true...
- Question 10: Which three statements about private VLANs are true? (Choose...
- Question 11: Which information does the ASA fail to replicate to the seco...
- Question 12: Which three options correctly identify the Cisco ASA1000V Cl...
- Question 13: To which interface on a Cisco ASA 1000V firewall should a se...
- Question 14: What are the three types of private VLAN ports? (Choose thre...
- Question 15: Which Layer 2 security feature validates ARP packets?...
- Question 16: Where do you apply a control plane service policy to impleme...
- Question 17: Which statement about Dynamic ARP Inspection is true?...
- Question 18: On an ASA running version 9.0, which command is used to nest...
- Question 19: How does the DAI work? (Choose two.)...
- Question 20: Which statement describes the correct steps to enable Botnet...
- Question 21: Which feature is a limitation of a Cisco ASA 5555-X running ...
- Question 22: A network engineer is troubleshooting and configures the ASA...
- Question 23: Which two parameters must be configured before you enable SC...
- Question 24: Refer to the exhibit. (Exhibit) Which type of ACL is shown i...
- Question 25: An engineer is configuring MACsec encryption. Which two comp...
- Question 26: Which VTP mode supports private VLANs on a switch?...
- Question 27: In which way are management packets classified on a firewall...
- Question 28: What is the lowest combination of ASA model and license prov...
- Question 29: When you install a Cisco ASA AIP-SSM, which statement about ...
- Question 30: Which two SNMPv3 features ensure that SNMP packets have been...
- Question 31: An administrator installed a Cisco ASA that runs version 9.1...
- Question 32: An attacker has gained physical access to a password protect...
- Question 33: An enterprise has enforced DHCP snooping on the enterprise s...
- Question 34: Which statement about the Cisco Security Manager 4.4 NAT Red...
- Question 35: An engineer must implement secure device management on a Cis...
- Question 36: What is the default log level on the Cisco Web Security Appl...
- Question 37: What is a benefit the iOS control plane protection?...
- Question 38: Which two features are supported when configuring clustering...
- Question 39: Which two voice and video protocols does the Cisco ASA 5500 ...
- Question 40: Which two features block traffic that is sourced from non-to...
- Question 41: Which two features does Cisco Security Manager provide? (Cho...
- Question 42: Which two data and voice protocols does ASA 5500 support? (C...
- Question 43: How much storage is allotted to maintain system, configurati...
- Question 44: When a Cisco ASA is configured in multiple context mode, wit...
- Question 45: In a Cisco ASAv failover deployment, which interface is prec...
- Question 46: Which URL matches the regex statement "http"*/"www.cisco.com...
- Question 47: Refer to the exhibit. (Exhibit) Which statement about this a...
- Question 48: Which Cisco ASA show command groups the xlates and connectio...
- Question 49: By default, not all services in the default inspection class...
- Question 50: You have installed a web server on a private network. Which ...
- Question 51: (Exhibit) SNMP users have a specified username, a group to w...
- Question 52: Where on a firewall does an administrator assign interfaces ...
- Question 53: With Cisco ASA active/standby failover, by default, how many...
- Question 54: A Cisco ASA requires an additional feature license to enable...
- Question 55: What are two reasons to implement Cisco IOS MPLS Bandwidth-A...
- Question 56: Where in the Cisco ASA appliance CLI are Active/Active Failo...
- Question 57: Which two options are protocols and tools that are used by t...
- Question 58: A rogue device has connected to the network and has become t...
- Question 59: Which two voice protocols can the Cisco ASA inspect? (Choose...
- Question 60: Which ASA feature is used to keep track of suspected attacke...
- Question 61: Refer to the exhibit. (Exhibit) Which option describes the e...
- Question 62: You are configuring a Cisco IOS Firewall on a WAN router tha...
- Question 63: What is the maximum jumbo frame size for IPS standalone appl...
- Question 64: A router is being enabled for SSH command line access. The f...
- Question 65: Refer to the exhibit. (Exhibit) Which command can produce th...
- Question 66: Which technology can be deployed with a Cisco ASA 1000V to s...
- Question 67: For which purpose is the Cisco ASA CLI command aaa authentic...
- Question 68: Which action is considered a best practice for the Cisco ASA...
- Question 69: Which configuration keyword will configure SNMPv3 with authe...
- Question 70: When configuring security contexts on the Cisco ASA, which t...
- Question 71: Which statement about Cisco IPS Manager Express is true?...
- Question 72: Which five options are valid logging destinations for the Ci...
- Question 73: How many interfaces can a Cisco ASA bridge group support and...
- Question 74: When a traffic storm threshold occurs on a port, into which ...
- Question 75: Which four are IPv6 First Hop Security technologies? (Choose...
- Question 76: The Cisco ASA must support dynamic routing and terminating V...
- Question 77: Which three options are default settings for NTP parameters ...
- Question 78: If you encounter problems logging in to the Cisco Security M...
- Question 79: Which command is the first that you enter to check whether o...
- Question 80: Which option is the default logging buffer size in memory of...
- Question 81: At which firewall severity level will debugs appear on a Cis...
- Question 82: When you configure a Botnet Traffic Filter on a Cisco firewa...
- Question 83: When configuring packet-tracer command from CLI, what is the...
- Question 84: (Exhibit) An SNMP host is an IP address to which SNMP notifi...
- Question 85: Which statement describes what the arp outside 1.1.1.1 0192....
- Question 86: Which action is needed to set up SSH on the Cisco ASA firewa...
- Question 87: Which Cisco switch technology prevents traffic on a LAN from...
- Question 88: When troubleshooting redundant interface operations on the C...
- Question 89: What is the default behavior of an access list on a Cisco AS...
- Question 90: Which statement about SNMP support on the Cisco ASA applianc...
- Question 91: Which statement about traffic zoning in cisco ASA?...
- Question 92: Which two options are available with cisco security manager ...
- Question 93: You are a security engineer at a large multinational retaile...
- Question 94: When it is configured in accordance to Cisco best practices,...
- Question 95: Which is the minimum RSA crypto key generate for SSH2?...
- Question 96: Which three configurations are needed to enable SNMPv3 suppo...
- Question 97: A Cisco ASA is configured in multiple context mode and has t...
- Question 98: Which three options are default settings for NTP parameters ...
- Question 99: Which two SNMPv3 features ensure that SNMP packets have been...
- Question 100: Which two statements about Cisco IOS Firewall are true? (Cho...
- Question 101: Which of the following that Cisco engineer must secure a cur...
- Question 102: Which component does Cisco ASDM require on the host Cisco AS...
- Question 103: An engineer is configuring control-plane protocol queue thre...
- Question 104: Which set of commands creates a message list that includes a...
- Question 105: In which two modes is zone-based firewall high availability ...
- Question 106: Which three Cisco ASA configuration commands are used to ena...
- Question 107: Which two configurations are necessary to enable password-le...
- Question 108: What is the primary purpose of stateful pattern recognition ...
- Question 109: An engineer must secure a LAN infrastructure from potential ...
- Question 110: What is the best description of a unified ACL on a Cisco fir...
- Question 111: Which two VPN types can you monitor and control with Cisco P...
- Question 112: What are two primary purposes of Layer 2 detection in Cisco ...
- Question 113: What can an administrator do to simultaneously capture and t...
- Question 114: Which statement about the configuration of Cisco ASA NetFlow...
- Question 115: SIMULATION (Exhibit)
- Question 116: Which type of object group will allow configuration for both...
- Question 117: When you set a Cisco IOS Router as an SSH server, which comm...
- Question 118: Which command configures the SNMP server group1 to enable au...
- Question 119: Which statement describes a unifeature of cisco netflow secu...
- Question 120: Your company is replacing a high-availability pair of Cisco ...
- Question 121: Which three statements about the software requirements for a...
- Question 122: Which command tests authentication with SSH and shows a gene...
- Question 123: Which Cisco product provides a GUI-based device management t...
- Question 124: Which set of commands enables logging and displays the log b...
- Question 125: In the default global policy, which traffic is matched for i...
- Question 126: If you disable PortFast on switch ports that are connected t...
- Question 127: An engineer is applying best practices to step STP unauthori...
- Question 128: You are the administrator of a Cisco ASA 9.0 firewall and ha...
- Question 129: Which Cisco ASA object group type offers the most flexibilit...
- Question 130: Which log level provides the most detail on the Cisco Web Se...
- Question 131: Which kind of Layer 2 attack targets the STP root bridge ele...
- Question 132: If a switch port goes directly into a blocked state only whe...
- Question 133: What mean following command arp outside 10.1.1.1 0009.xxxx.2...
- Question 134: Which option describes the purpose of the input parameter wh...
- Question 135: You have explicitly added the line deny ipv6 any log to the ...
- Question 136: Which two statements about zone-based firewalls are true? (C...
- Question 137: When a Cisco ASA CX module is managed by Cisco Prime Securit...
- Question 138: Which statement about the Cisco ASA botnet traffic filter is...
- Question 139: Enabling what security mechanism can prevent an attacker fro...
- Question 140: Which command displays syslog messages on the Cisco ASA cons...
- Question 141: Which two options are two purposes of the packet-tracer comm...
- Question 142: Which three logging methods are supported by Cisco routers? ...
- Question 143: A network engineer must manage and push configurations to a ...
- Question 144: (Exhibit) Which statement about how the Cisco ASA supports S...
- Question 145: Which two options are main challenges for public cloud data ...
- Question 146: Which three options describe how SNMPv3 traps can be securel...
- Question 147: Which two statements about Cisco IDS are true? (Choose two.)...
- Question 148: Private VLANs have been configured in the data center. Which...
- Question 149: What can you do to enable inter-interface firewall communica...
- Question 150: When configuring a new context on a Cisco ASA device, which ...
- Question 151: IPv6 addresses in an organization's network are assigned usi...
- Question 152: Which two device types can Cisco Prime Security Manager mana...
- Question 153: In IOS routers, what configuration can ensure both preventio...
- Question 154: How many bridge groups are supported on a firewall that oper...
- Question 155: What are three attributes that can be applied to a user acco...
- Question 156: You are the administrator of a multicontext transparent-mode...
- Question 157: When configured in accordance to Cisco best practices, the i...
- Question 158: When a Cisco ASA is configured in transparent mode, how can ...
- Question 159: Which two configurations are the minimum needed to enable EI...
- Question 160: Refer to the exhibit. (Exhibit) To protect Host A and Host B...
- Question 161: A firewall administrator must write a short script for netwo...
- Question 162: Which device can be managed by the Cisco Prime Security Mana...
- Question 163: Which statement about the Cisco ASA configuration is true?...
- Question 164: Refer to the exhibit. (Exhibit) Server A is a busy server th...
- Question 165: Which command sets the source IP address of the NetFlow expo...
- Question 166: Enabling what security mechanism can prevent an attacker fro...
- Question 167: Which statement about Cisco ASA NetFlow v9 (NSEL) is true?...
- Question 168: Which technology provides forwarding-plane abstraction to su...
- Question 169: Which security operations management best practice should be...
- Question 170: Refer to the exhibit. (Exhibit) This command is used to conf...
- Question 171: On the Cisco ASA, where are the Layer 5-7 policy maps applie...
- Question 172: What are two reasons for implementing NIPS at enterprise Int...
