Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 131:

  Refer to the exhibit. What is the purpose of the given configuration?

  

  A. Establishing a GRE tunnel.
  B. Enabling IPSec to decrypt fragmented packets.
  C. Resolving access issues caused by large packet sizes.
  D. Adding the spoke to the routing table.
  C. Resolving access issues caused by large packet sizes.

• Question 132:

  Which two types of authentication are supported when you use Cisco ASDM to configure site- to-site IKEv2 with IPv6? (Choose two.)

  A. preshared key
  B. webAuth
  C. digital certificates
  D. XAUTH
  E. EAP
  A. preshared key
  C. digital certificates

• Question 133:

  Which VPN solution is best for a collection of branch offices connected by MPLS that frequenty make VoIP calls between branches?

  A. GETVPN
  B. Cisco AnyConnect
  C. site-to-site
  D. DMVPN
  A. GETVPN

• Question 134:

  DRAG DROP

  Drag and drop the descriptions from the left onto the correct IPsec tunnel types on the right.

  Select and Place:

  

  

  ---

  Reference: https://www.cisco.com/en/US/docs/ios/12_3t/12_3t14/feature/guide/gtIPSctm.html

• Question 135:

  Which three types of SSO functionality are available on the Cisco ASA without any external SSO servers? (Choose three.)

  A. SAML
  B. HTTP POST C. HTTP Basic
  D. NTLM
  E. Kerberos
  F. OAuth 2.0
  B. HTTP POST C. HTTP Basic
  D. NTLM

• Question 136:

  Which two option are features of CISCO GET VPN? (choose two)

  A. uses public internet
  B. use mGRE
  C. provides point-to-point IPsec SA
  D. provides encryption for MPLS
  E. allows for optimal routing
  D. provides encryption for MPLS
  E. allows for optimal routing

• Question 137:

  A user is experiencing issues connecting to a Cisco AnyConnect VPN and receives this error message:

  The AnyConnect package on the secure gateway could not be located.

  You may be experiencing network connectivity issues. Please try connecting again.

  Which option is the likely cause of this issue?

  A. This Cisco ASA firewall has experienced a failure.
  B. The user is entering an incorrect password.
  C. The user's operating system is not supported with the ASA's current configuration.
  D. The user laptop clock is not synchronized with NTP.
  C. The user's operating system is not supported with the ASA's current configuration.

• Question 138:

  Which protocols does the Cisco AnyConnect client use to build multiple connections to the security appliance?

  A. TLS and DTLS
  B. IKEv1
  C. L2TP over IPsec
  D. SSH over TCP
  A. TLS and DTLS

• Question 139:

  Which functionality is provided by L2TPv3 over FlexVPN?

  A. the extension of a Layer 2 domain across the FlexVPN
  B. the extension of a Layer 3 domain across the FlexVPN
  C. secure communication between servers on the FlexVPN
  D. a secure backdoor for remote access users through the FlexVPN
  A. the extension of a Layer 2 domain across the FlexVPN

• Question 140:

  Refer to the exhibit. The IKEv2 tunnel between Router1 and Router2 is failing during session establishment. Which action will allow the session to establish correctly?

  

  A. The address command on Router2 must be narrowed down to a /32 mask.
  B. The local and remote keys on Router2 must be switched.
  C. The pre-shared key must be altered to use only lowercase letters.
  D. The local and remote keys on Router2 must be the same.
  B. The local and remote keys on Router2 must be switched.