[Latest Updates] Cisco CCNP Security 300-206 Exam Practice Questions and answers,300-206 dumps free
Latest updates Cisco CCNP Security Implementing Cisco Edge Network Security Solutions (SENSS v1.0) 300-206 exam questions and Answers! Free sharing 300-206 pdf online download, online exam Practice test, easy to improve skills! Get the full 300-206 exam dumps: https://www.leads4pass.com/300-206.html (Total questions:358 Q&A). Year-round updates! guarantee the first attempt to pass the exam!
[PDF] Free Cisco 300-206 pdf dumps download from Google Drive: https://drive.google.com/open?id=1Fi5dnXk7rMDP8fptBfxwC4gFUayiB1VE
[PDF] Free Full Cisco pdf dumps download from Google Drive: https://drive.google.com/open?id=1CMo2G21nPLf7ZmI-3_hBpr4GDKRQWrGx
300-206 SENSS – Cisco: https://www.cisco.com/c/en/us/training-events/training-certifications/exams/current-list/specialist-senss.html
Latest effective Cisco 300-206 Exam Practice Tests
QUESTION 1
What are two security features at the access port level that can help mitigate Layer 2 attacks? (Choose two.)
A. DHCP snooping
B. IP Source Guard
C. Telnet
D. Secure Shell
E. SNMP
Correct Answer: AB
QUESTION 2
Choose two correct statements about private-vlan.
A. Interface that is assigned to primary-vlan ID (access mode) can communicate with interface with secondary vlan ID
that belongs to same primary-vlan (same switch)
B. Interface that is assigned to community vlan can communicate with interface in the same secondary vlan but it is also
configured as protected (same switch)
C. You have to configure dhcp snooping for both primary and secondary VLANs
D. You have to configure DAI only for primary vlan
E. You cannot combine private-vlan feature with protected ports ?
Correct Answer: DE
You can enable DHCP snooping on private VLANs. When you enable DHCP snooping on the primary VLAN, it is
propagated to the secondary VLANs. If you configure DHCP snooping on a secondary VLAN, the configuration does not
take
effect if the primary VLAN is already configured. The same statement is true about DAI.
A private-VLAN port cannot be a secure port and should not be configured asa protected port.