Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 101:

  Refer to the exhibit. Which VPN solution does this configuration represent?

  

  A. Cisco AnyConnect
  B. IPsec
  C. L2TP
  D. SSL VPN
  B. IPsec

• Question 102:

  A company has decided to migrate an existing IKEv1 VPN tunnel to IKEv2. Which two arevalid configuration constructs on a Cisco IOS router? (Choose two.)

  A. crypto ikev2 keyring keyring-name peer peer1 address 209.165.201.1 255.255.255.255 pre-shared-key local key1 pre-shared-key remote key2
  B. crypto ikev2 transform-set transform-set-name esp-3des esp-md5-hmac esp-aes esp-sha-hmac
  C. crypto ikev2 map crypto-map-name set crypto ikev2 tunnel-group tunnel-group-name set crypto ikev2 transform-set transform-set-name
  D. crypto ikev2 tunnel-group tunnel-group-name match identity remote address 209.165.201.1 authentication local pre-share authentication remote pre-share
  E. crypto ikev2 profile profile-name match identity remote address 209.165.201.1 authentication local pre-share authentication remote pre-share
  A. crypto ikev2 keyring keyring-name peer peer1 address 209.165.201.1 255.255.255.255 pre-shared-key local key1 pre-shared-key remote key2
  E. crypto ikev2 profile profile-name match identity remote address 209.165.201.1 authentication local pre-share authentication remote pre-share

• Question 103:

  As network security architect, you must implement secure VPN connectivity among company branches over a private IP cloud with any-to-any scalable connectivity. Which technology should you use?

  A. IPsec DVTI
  B. FlexVPN
  C. DMVPN
  D. IPsec SVTI
  E. GET VPN
  E. GET VPN

• Question 104:

  You need to configure your company's client VPN access to send antivirus client update traffic directly to a vendor's cloud server. All other traffic must go to the corporate network. Which feature do you configure?

  A. split tunnel
  B. smart tunnel
  C. full tunnel
  D. Split DNS
  A. split tunnel

• Question 105:

  Refer to the exhibit. An engineer is troubleshooting a new GRE over IPSEC tunnel. The tunnel is established, but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked?

  

  A. ESP packets from spoke1 to spoke2
  B. ISAKMP packets from spoke2 to spoke1
  C. ESP packets from spoke2 to spoke1
  D. ISAKMP packets from spoke1 to spoke2
  C. ESP packets from spoke2 to spoke1

• Question 106:

  Which command enables the router to form EIGRP neighbor adjacencies with peers using a different subnet than the ingress interface?

  A. ip unnumbered interface
  B. eigrp router-id
  C. passive-interface interface name
  D. ip split-horizon eigrp as number
  A. ip unnumbered interface

• Question 107:

  In a FlexVPN deployment, the spokes are successfully connecting to the hub. However, spoke-to- spoke tunnels do not form. Which trouble shooting step is valid for this issue?

  A. Verify the spoke configuration to check if the NHRP redirect is enabled.
  B. Verify the hub configuration to check if the NHRP shortcut is enabled.
  C. Verify the tunnel interface is contained within a VRF.
  D. Verify the spoke receives redirect messages and send resolution requests
  A. Verify the spoke configuration to check if the NHRP redirect is enabled.

• Question 108:

  Which command identifies an AnyConnect profile that was uploaded to the router flash?

  A. crypto vpn anyconnect profile SSL_profile flash:simos-profile.xml
  B. svc import profile SSL_profile flash:simos-profile.xml
  C. anyconnect profile SSL_profile flash:simos-profile.xml
  D. webvpn import profile SSL_profile flash:simos-profile.xml
  A. crypto vpn anyconnect profile SSL_profile flash:simos-profile.xml

• Question 109:

  Which two components are necessary for configuring spoke-to-spoke FlexVPN connections? (Choose two.)

  A. NHRP redirect
  B. IVRF
  C. IKE version 1
  D. IKE version 2
  E. HSRP group
  A. NHRP redirect
  D. IKE version 2

• Question 110:

  Which are two main use cases for Clientless SSL VPN? (Choose two.)

  A. In kiosks that are part of a shared environment
  B. When the users do not have admin rights to install a new VPN client
  C. When full tunneling is needed to support applications that use TCP, UDP, and ICMP
  D. To create VPN site-to-site tunnels in combination with remote access
  A. In kiosks that are part of a shared environment
  B. When the users do not have admin rights to install a new VPN client