300-206 Prüfung, 300-206 zertifizierung

300-206 Prüfung, 300-206 zertifizierung Implementing Cisco Edge Network Security Solutions www.it-pruefungen.de

QUESTION 1
Which three commands can be used to harden a switch? (Choose three.)

A. switch(config-if)# spanning-tree bpdufilter enable
B. switch(config)# ip dhcp snooping
C. switch(config)# errdisable recovery interval 900
D. switch(config-if)# spanning-tree guard root
E. switch(config-if)# spanning-tree bpduguard disable
F. switch(config-if)# no cdp enable

Answer: BDF

QUESTION 2
What are three features of the Cisco ASA 1000V? (Choose three.)

A. cloning the Cisco ASA 1000V
B. dynamic routing
C. the Cisco VNMC policy agent
D. IPv6
E. active/standby failover
F. QoS

Answer: ACE

QUESTION 3
If the Cisco ASA 1000V has too few licenses, what is its behavior?

A. It drops all traffic.
B. It drops all outside-to-inside packets.
C. It drops all inside-to-outside packets.
D. It passes the first outside-to-inside packet and drops all remaining packets.

Answer: D

QUESTION 4
A network administrator is creating an ASA-CX administrative user account with the following parameters:
-The user will be responsible for configuring security policies on network devices.
-The user needs read-write access to policies.
-The account has no more rights than necessary for the job.
What role will the administrator assign to the user?

A. Administrator
B. Security administrator
C. System administrator
D. Root Administrator
E. Exec administrator

Answer: B

300-206 Prüfungsfragen, 300-206 Examensfragen Implementing Cisco Edge Network Security Solutions (ICND2 v3.0)  https://www.it-pruefungen.de/300-206.htm

QUESTION 5
Which two web browsers are supported for the Cisco ISE GUI? (Choose two.)

A. HTTPS-enabled Mozilla Firefox version 3.x
B. Netscape Navigator version 9
C. Microsoft Internet Explorer version 8 in Internet Explorer 8-only mode
D. Microsoft Internet Explorer version 8 in all Internet Explorer modes
E. Google Chrome (all versions)

Answer: AC

QUESTION 6
With Cisco ASA active/standby failover, by default, how many monitored interface failures will cause failover to occur?

A. 1
B. 2
C. 3
D. 4
E. 5

Answer: A

Prüfungsvorbereitung Studienmaterial 300-206 deutsch Implementing Cisco Edge Network Security Solutions www.it-pruefungen.de

QUESTION 7
Which statement about SNMP support on the Cisco ASA appliance is true?

A. The Cisco ASA appliance supports only SNMPvl or SNMPv2c.
B. The Cisco ASA appliance supports read-only and read-write access.
C. The Cisco ASA appliance supports three built-in SNMPv3 groups in Cisco ASDM:
Authentication and Encryption, Authentication Only, and No Authentication, No Encryption.
D. The Cisco ASA appliance can send SNMP traps to the network management station only using SNMPv2.

Answer: C

300-135 Prüfungsvorbereitung

300-135 Prüfungsvorbereitung Studienmaterial deutsch Troubleshooting and Maintaining Cisco IP Networks (TSHOOT) www.it-pruefungen.de

QUESTION: 1
- (Topic 0)

Exhibit:

A network administrator is troubleshooting an EIGRP connection between RouterA, IP address 10.1.2.1, and RouterB, IP address 10.1.2.2. Given the debug output on RouterA, which two statements are true? (Choose two.)

A. RouterA received a hello packet with mismatched autonomous system numbers.
B. RouterA received a hello packet with mismatched hello timers.
C. RouterA received a hello packet with mismatched authentication parameters.
D. RouterA received a hello packet with mismatched metric-calculation mechanisms.
E. RouterA will form an adjacency with RouterB.
F. RouterA will not form an adjacency with RouterB.

Answer: D,F

QUESTION: 2
- (Topic 0)

When troubleshooting an EIGRP connectivity problem, you notice that two connected EIGRP routers are not becoming EIGRP neighbors. A ping between the two routers was successful. What is the next thing that should be checked?

A. Verify that the EIGRP hello and hold timers match exactly.
B. Verify that EIGRP broadcast packets are not being dropped between the two routers with the show ip EIGRP peer command.
C. Verify that EIGRP broadcast packets are not being dropped between the two routers with the show ip EIGRP traffic command.
D. Verify that EIGRP is enabled for the appropriate networks on the local and neighboring router.

Answer: D

QUESTION: 3
- (Topic 0)

Refer to the exhibit.

How would you confirm on R1 that load balancing is actually occurring on the default- network (0.0.0.0)?

A. Use ping and the show ip route command to confirm the timers for each default network resets to 0.
B. Load balancing does not occur over default networks; the second route will only be used for failover.
C. Use an extended ping along with repeated show ip route commands to confirm the gateway of last resort address toggles back and forth.
D. Use the traceroute command to an address that is not explicitly in the routing table.

Answer: D

IT-Prüfungen 300-135 Troubleshooting and Maintaining Cisco IP Networks (TSHOOT)  https://www.it-pruefungen.de/300-135.htm

QUESTION: 4
- (Topic 0)

Which IPsec mode will encrypt a GRE tunnel to provide multiprotocol support and reduced overhead?

A. 3DES
B. multipoint GRE
C. tunnel
D. transport

Answer: D

QUESTION: 5
- (Topic 0)

Which three features are benefits of using GRE tunnels in conjunction with IPsec for building site-to-site VPNs? (Choose three.)

A. allows dynamic routing over the tunnel
B. supports multi-protocol (non-IP) traffic over the tunnel
C. reduces IPsec headers overhead since tunnel mode is used
D. simplifies the ACL used in the crypto map
E. uses Virtual Tunnel Interface (VTI) to simplify the IPsec VPN configuration

Answer: A,B,D

300-135 Prüfungsfragen Troubleshooting and Maintaining Cisco IP Networks (TSHOOT) www.it-pruefungen.de

QUESTION: 6
- (Topic 0)

Which statement is true about an IPsec/GRE tunnel?

A. The GRE tunnel source and destination addresses are specified within the IPsec transform set.
B. An IPsec/GRE tunnel must use IPsec tunnel mode.
C. GRE encapsulation occurs before the IPsec encryption process.
D. Crypto map ACL is not needed to match which traffic will be protected.

Answer: C

300-115 SWITCH Prüfungsvorbereitung

300-115 SWITCH Prüfungsvorbereitung, 300-115 SWITCH Studienmaterial deutsch Implementing Cisco IP Switched Networks (SWITCH v2.0) www.it-pruefungen.de

QUESTION: 1
A network engineer wants to make sure that an access switch will never become a Spanning
Tree root for VLAN 5. What action will accomplish this task?
A. adjust STP priority to the maximum value
B. disable STP globally
C. apply root guard to all outgoing neighbor interfaces
D. enable MSTP and use a different revision number than all other switches
Answer: A
QUESTION: 2
Which authentication service is needed to configure 802.1x?
A. RADIUS with EAP Extension
B. TACACS+
C. RADIUS with CoA
D. RADIUS using VSA
Answer: A
QUESTION: 3
Which switch feature determines validity based on IP-to-MAC address bindings that are
stored in a trusted database?
A. Dynamic ARP Inspection
B. storm control
C. VTP pruning
D. DHCP snooping
Answer: A

IT-Prüfungen 300-115 SWITCH Implementing Cisco IP Switched Networks (SWITCH v2.0) www.it-pruefungen.de

QUESTION: 4
What is the default amount by which the hot standby priority for the router is decremented or
incremented when the interface goes down or comes back up?
A. 1
B. 5
C. 10
D. 15
Answer: C
QUESTION: 5
Which feature describes MAC addresses that are dynamically learned or manually configured,
stored in the address table, and added to the running configuration?
A. sticky
B. dynamic
C. static
D. secure
Answer: A

300-115 SWITCH Prüfungsfragen Implementing Cisco IP Switched Networks (SWITCH v2.0) www.it-pruefungen.de

QUESTION: 6
Which configuration command ties the router hot standby priority to the availability of its
interfaces?
A. standby group
B. standby priority
C. backup interface
D. standby track
Answer: D

300-101 ROUTE IT-Prüfungen

cisco 300-101 ROUTE IT-Prüfungen, 300-101 zertifizierung Implementing Cisco IP Routing (ROUTE v2.0) www.it-pruefungen.de

Q1
A network engineer notices that transmission rates of senders of TCP traffic sharply increase and decrease simultaneously during periods of congestion. Which condition causes this?
A. global synchronization
B. tail drop
C. random early detection
D. queue management algorithm
Answer: A
Q2
Which three problems result from application mixing of UDP and TCP streams within a
network with no QoS? (Choose three.)
A. starvation
B. jitter
C. latency
D. windowing
E. lower throughput
Answer: A, C, E

300-101 ROUTE Prüfungsfragen, 300-101 Examensfragen Implementing Cisco IP Routing (ROUTE v2.0) (ICND2 v3.0) www.it-pruefungen.de

Q3
Which method allows IPv4 and IPv6 to work together without requiring both to be used for a single connection during the migration process?
A. dual-stack method
B. 6to4 tunneling
C. GRE tunneling
D. NAT-PT
Answer: A
Q4
Which statement about the use of tunneling to migrate to IPv6 is true?
A. Tunneling is less secure than dual stack or translation.
B. Tunneling is more difficult to configure than dual stack or translation.
C. Tunneling does not enable users of the new protocol to communicate with users of the old
protocol without dual-stack hosts.
D. Tunneling destinations are manually determined by the IPv4 address in the low-order 32 bits of IPv4-compatible IPv6 addresses.
Answer: C

300-101 ROUTE Prüfungsvorbereitung, 300-101 ROUTE Studienmaterial deutsch Implementing Cisco IP Routing (ROUTE v2.0) www.it-pruefungen.de

Q5
A network administrator executes the command clear ip route. Which two tables does this command clear and rebuild? (Choose two.)
A. IP routing
B. FIB
C. ARP cache
D. MAC address table
E. Cisco Express Forwarding table
F. topology table
Answer: A, B

210-260 Prüfungsvorbereitung

210-260  Prüfungsvorbereitung, 210-260 Studienmaterialien deutsch Implementing Cisco Network Security www.it-pruefungen.de

QUESTION: 1

When an IPS detects an attack, which action can the IPS take to prevent the attack from spreading?

A. Deny the connection inline.
B. Perform a Layer 6 reset.
C. Deploy an antimalware system.
D. Enable bypass mode.

Answer: A

QUESTION: 2

Which command is needed to enable SSH support on a Cisco Router?

A. crypto key lock rsa
B. crypto key generate rsa
C. crypto key zeroize rsa
D. crypto key unlock rsa

Answer: B

IT-Prüfungen 210-260 Implementing Cisco Network Security www.it-pruefungen.de

QUESTION: 3

A clientless SSL VPN user who is connecting on a Windows Vista computer is missing the menu option for Remote Desktop Protocol on the portal web page. Which action should you take to begin troubleshooting?

A. Ensure that the RDP2 plug-in is installed on the VPN gateway
B. Reboot the VPN gateway
C. Instruct the user to reconnect to the VPN gateway
D. Ensure that the RDP plug-in is installed on the VPN gateway

Answer: D

QUESTION: 4

Which two features are commonly used CoPP and CPPr to protect the control plane? (Choose two.)

A. QoS
B. traffic classification
C. access lists
D. policy maps
E. class maps
F. Cisco Express Forwarding

Answer: A,B

210-260 Prüfungsfragen Implementing Cisco Network Security www.it-pruefungen.de

QUESTION: 5

What VPN feature allows traffic to exit the security appliance through the same interface it entered?

A. hairpinning
B. NAT
C. NAT traversal
D. split tunneling

Answer: A

210-250 SECFND Prüfungsfragen, 210-250 Examensfragen

210-250 SECFND Prüfungsfragen, 210-250 Examensfragen Understanding Cisco Cybersecurity Fundamentals (ICND2 v3.0) www.it-pruefungen.de

Exam Number 210-250 SECFND
Associated Certifications CCNA Cyber Ops
Duration 90 Minutes (55-60 questions)
Available Languages English
Register Pearson VUE

This exam is the first of the two required exams to achieve the CCNA Cyber Ops certification and is aligned with the job role of an associate-level Security Operations Center (SOC) Security Analyst. The SECFND exam tests candidates understanding of cybersecurity’s basic principles, foundational knowledge, and core skills needed to grasp the more advanced associate-level materials in the second required exam, “Implementing Cisco Cybersecurity Operations (SECOPS)”.

Prüfungsvorbereitung 210-250 SECFND Studienmaterialien deutsch Understanding Cisco Cybersecurity Fundamentals https://www.it-pruefungen.de/210-250.htm

The following course is the recommended training for this exam:

Understanding Cisco Cybersecurity Fundamentals (SECFND)
Self paced eLearning | Instructor led training

Courses listed are offered by Cisco Learning Partners-the only authorized source for Cisco IT training delivered exclusively by Certified Cisco Instructors. Check the List of Learning Partners for a Cisco Learning Partner nearest you.

IT-Prüfungen 210-250 SECFND Understanding Cisco Cybersecurity Fundamentals www.it-pruefungen.de

210-065 IT-Prüfungen, 210-065 zertifizierung

210-065 IT-Prüfungen, 210-065 zertifizierung Implementing Cisco Video Network Devices v1.0 www.it-pruefungen.de

QUESTION: 1

Which four features are provided by Cisco TelePresence Management Suite? (Choose four.)

A. Scheduling of video conference calls
B. Built-in-bridge functionality for multiparty video conferences
C. SIP-H.323 protocol interworking
D. Centralized management of conference resources
E. SMTP email event notification
F. Endpoint configuration backup and restore
G. Cisco TelePresence endpoint automated redundancy
H. Automated resource optimization

Answer: A,D,E,F

QUESTION: 2

Management wants to modify Cisco TMS to allow users to configure the call behavior with their associated devices and dial from a single ID. Which feature needs to be enabled and configured?

A. Smart Scheduler
B. Low-touch Provisioning
C. FindMe
D. CMR Provisioning

Answer: C

210-065 Prüfungsfragen, 210-065 Examensfragen Implementing Cisco Video Network Devices v1.0 (ICND2 v3.0) https://www.it-pruefungen.de/210-065.htm

QUESTION: 3

Which three features are supported by Cisco TMSPE? (Choose three.)

A. Simplified provisioning
B. LDAP user import
C. Scheduling via Microsoft Outlook
D. FindMe
E. Jabber for Windows
F. Automatic endpoint upgrades

Answer: A,B,D

QUESTION: 4

Which three features does Cisco VCS provide? (Choose three.)

A. native Cisco SCCP telephony integration
B. SIP-H.323 interworking functionality
C. native scheduling
D. SIP trunk integration with Cisco Unified Communications Manager
E. third-party standards-based H.323 and SIP device registration
F. reverse proxy functionality

Answer: B,D,E

Prüfungsvorbereitung Studienmaterialien 210-065 deutsch Implementing Cisco Video Network Devices v1.0 www.it-pruefungen.de

QUESTION: 5

A technician is tasked with performing a room readiness assessment in preparation for an immersive video endpoint. What are three Cisco best practices regarding lighting recommendations for the room? (Choose three.)

A. The bulb temperature should be between 4000 and 4100K.
B. Key lighting should be between 200 and 400 Lux with the endpoint powered on.
C. Shoulder lighting should not exceed two times the facial lighting values with the endpoint off.
D. Use direct lighting fixtures.
E. Within the camera field of view, the lighting for all parts of the room should not fluctuate more than 100 Lux.
F. Avoid using dimming light control systems.

Answer: A,C,E

Prüfungsvorbereitung auf 210-060

Prüfungsvorbereitung auf 210-060 Studienmaterialien deutsch Implementing Cisco Collaboration Devices (CICD) www.it-pruefungen.de

QUESTION: 1

A user reports that when they receive a voicemail on their phone, they do not receive it in their email as well. Which feature on Cisco Unity Connection should be checked?

A. Cisco Unified Messaging Service
B. Enterprise Parameters
C. Roles
D. Message Waiting Indicators
E. Alternate MWI

Answer: A

QUESTION: 2

An engineer receives a service ticket because a user cannot log into Cisco Unified CM User Options. Where can the engineer verify that the user account is active?

A. LDAP System Configuration
B. LDAP Directory
C. End User Configuration
D. LDAP Authentication
E. Route Plan Report

Answer: C

QUESTION: 3

Which port is the default port for SCCP call signaling on Cisco Unified Communications Manager?

A. 2000
B. 2443
C. 5060
D. 5061

Answer: A

IT-Prüfungen 210-060 Implementing Cisco Collaboration Devices (CICD) https://www.it-pruefungen.de/210-060.htm

QUESTION: 4

Which type of signaling does desktop control mode use to control a desk phone?

A. CTIQBE
B. SIP
C. XMPP
D. SCCP

Answer: A

QUESTION: 5

Which three methods can remotely force a Cisco Unified Communications Manager Express phone to reset? (Choose three.)

A. Issue a shutdown, no shutdown command on a switch port that provides PoE to a Cisco phone.
B. Issue the restart command under the ephone-dn configuration of the phone.
C. Issue the reset command under the ephone configuration of the phone.
D. Issue the reset command under the ephone-dn configuration of the phone.
E. Issue the reset H.H.H (mac-address) command telephony-service configuration.
F. Issue the reset H.H.H (mac-address) command under global configuration.

Answer: A,C,E

210-060 Prüfungsfragen Implementing Cisco Collaboration Devices (CICD) www.it-pruefungen.de

QUESTION: 6

The IP phone of user A is registered with Cisco Unified Communications Manager subscriber1 while the IP phone of user B is registered with subscriber2. User A is speaking to user B on an active call. A junior network engineer mistakenly reboots subscriber1.

What effect does this have on the call?

A. User A can hear B, but B cannot hear A.
B. User A cannot hear B, but B can hear A.
C. This action drops the call.
D. This action does not affect the call.
E. The call remains active, but quality may suffer.

Answer: D