Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 91:

  Scenario:

  You are the senior network security administrator for your organization. Recently and junior engineer configured a site-to-site IPsec VPN connection between your headquarters Cisco ASA and a remote branch office.

  You are now tasked with verifying the IKEvl IPsec installation to ensure it was properly configured according to designated parameters. Using the CLI on both the Cisco ASA and branch ISR, verify the IPsec configuration is properly configured

  between the two sites.

  NOTE: the show running-config command cannot be used for this exercise.

  Topology:

  

  Which transform set is being used on the branch ISR?

  A. Default
  B. ESP-3DES ESP-SHA-HMAC
  C. ESP-AES-256-MD5-TRANS mode transport
  D. TSET
  B. ESP-3DES ESP-SHA-HMAC

  ---

  This can be seen from the “show crypto ipsec sa” command as shown below:

  

• Question 92:

  Which application does the Application Access feature of Clientless VPN support?

  A. TFTP
  B. VoIP
  C. Telnet
  D. active FTP
  C. Telnet

• Question 93:

  An engineer is attempting to establish a new site-to site VPN connection.

  The tunnel terminates on an ASA 5506-X which is behind an ASA 5515-x.

  The engineer notices that the tunnel is not establishing.

  Which option is a potential cause?

  A. Certificates were not configured
  B. Diffie -Helman Group is not set
  C. Access lists were not applied
  D. NAT - traversal is not configured
  D. NAT - traversal is not configured

• Question 94:

  Which feature enforces the corporate policy for Internet access to Cisco AnyConnect VPN users?

  A. Trusted Network Detection
  B. Datagram Transport Layer Security
  C. Cisco AnyConnect Customization
  D. banner message
  A. Trusted Network Detection

• Question 95:

  Which Cisco IOS feature provides secure, on-demand meshed connectivity?

  A. Easy VPN
  B. IPsec VPN
  C. mGRE
  D. DMVPN
  D. DMVPN

• Question 96:

  Which three types of web resources or protocols are enabled by default on the Cisco ASA Clientless SSL VPN portal? (Choose three.)

  A. HTTP
  B. VNC
  C. CIFS
  D. RDP
  E. HTTPS
  F. ICA (Citrix)
  A. HTTP
  C. CIFS
  E. HTTPS

• Question 97:

  Which type of NHRP packet is unique to Phase 3 DMVPN topologies?

  A. resolution request
  B. resolution reply
  C. traffic indication
  D. registration request
  E. registration reply
  F. error indication
  C. traffic indication

• Question 98:

  Which technology does a multipoint GRE interface require to resolve endpoints?

  A. ESP
  B. dynamic routing
  C. NHRP
  D. CEF
  E. IPSec
  C. NHRP

• Question 99:

  A network engineer wants to send multicast traffic between two routers that are separated by an IP cloud. The network engineer has access to the two routers, but does not have administrative control of the devices within the IP cloud. How can this goal be accomplished?

  A. Configure a generic routing encapsulation tunnel
  B. Configure a crypto-map based site-to-site VPN between the two routers
  C. Use IP PIM dense-mode
  D. Turn on IP multicast routing
  A. Configure a generic routing encapsulation tunnel

• Question 100:

  On which type of encrypted traffic can a Cisco ASA appliance running software version 8.4.1 perform application inspection and control?

  A. IPsec
  B. SSL
  C. IPsec or SSL
  D. Cisco Unified Communications
  E. Secure FTP
  D. Cisco Unified Communications