When configuring security contexts on the Cisco ASA, which three resource class limits can be set using a rate limit? (Choose three.)
A. address transition rate
B. Cisco ASDM session rate
C. connections rate
D. MAC-address learning rate (when in transparent mode) E. syslog messages rate
F. statefui packet inspections rate
The Cisco ASA must support dynamic routine and terminating VPN traffic. Which three Cisco ASA options will not support these requirements? (Choose three.)
A. transparent mode
B. multiple context mode
C. active/stand by failover mode D. active/active failover mode
E. routed mode
F. no NAT-control
Which command displays syslog messages on the Cisco ASA console as they occur? A. Console logging
B. logging console
C. logging trap
D. Terminal monitor
E. logging monitor < level >
Which three configurations are needed to enable SNMPv3 support on the Cisco ASA? (Choose three.) A. SNMPv3 Local EngineID
B. SNMPv3 Remote EngineID
C. SNMP Users
D. SNMP Groups
E. SNMP Community Strains F. SNMP Hosts
Which two configurations are the minimum needed to enable EIGRP on the Cisco ASA appliance? (Choose two.)
A. Enable the EIGRP routine process and specify the AS number.
B. Define the EIGRP default-metric.
C. Configure the EIGRP router ID.
D. Use the neighbor command(s) to specify the EIGRP neighbors.
E. Use the network command(s) to enable EIGRP on the Cisco ASA interface(s). Answers A, E
All 30 users on a single floor of a building are complaining about network slowness. After investigating the access switch, the network administrator notices that the MAC address table is full (10,000 entries) and all traffic is being flooded out of every port. Which Action can the administrator take to prevent this from occurring?
A. Configure port-security to limit the number of mac-addresses allowed on each port B. Upgrade the switch to one that can handle 20,000 entries
C. Configure private-vians to prevent hosts from communicating with one another
D. Enable storm-control to limit the traffic rate
E. Configure a VACL to block all IP traffic except traffic to and from that subnet
A network printer has a DHCP server service that cannot be disabled. How can a layer 2 switch be configured to prevent the printer from causing network issues?
A. Remove the ip helper-address
B. Configure a Port-ACL to block outbound TCP port 68 C. Configure DHCP snooping
D. Configure port-security
A switch is being configured at a new location that uses statically assigned IP addresses. Which will ensure that ARP inspection works as expected?
A. Configure the 'no-dhcp' keyword at the end of the ip arp inspection command
B. Enable static arp inspection using the command 'ip arp inspection static vlan vlan- number C. Configure an arp access-list and apply it to the ip arp inspection command
D. Enable port security
Which two voice protocols can the Cisco ASA inspect? (Choose two.) A. MGCP
Answers A, D
You have explicitly added the line deny ipv6 any log to the end of an IPv6 ACL on a router interface. Which two ICMPv6 packet types must you explicitly allow to enable traffic to traverse the interface? (Choose two.)
A. router solicitation
B. router advertisement
C. neighbor solicitation
D. neighbor advertisement E. redirect
Answers C, D
Would you like to see more? Donât miss our 300-206 PDF file at: