Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 151:

  Which option describes the purpose of the shared argument in the DMVPN interface command tunnel protection IPsec profile ProfileName shared?

  A. shares a single profile between multiple tunnel interfaces
  B. allows multiple authentication types to be used on the tunnel interface
  C. shares a single profile between a tunnel interface and a crypto map
  D. shares a single profile between IKEv1 and IKEv2
  A. shares a single profile between multiple tunnel interfaces

• Question 152:

  Which statement about plug-ins is false?

  A. Plug-ins do not require any installation on the remote system.
  B. Plug-ins require administrator privileges on the remote system.
  C. Plug-ins support interactive terminal access.
  D. Plug-ins are not supported on the Windows Mobile platform.
  B. Plug-ins require administrator privileges on the remote system.

• Question 153:

  To change the title panel on the logon page of the Cisco IOS WebVPN portal, which file must you configure?

  A. Cisco IOS WebVPN customization template
  B. Cisco IOS WebVPN customization general
  C. web-access-hlp.inc
  D. app-access-hlp.inc
  A. Cisco IOS WebVPN customization template

• Question 154:

  A network is configured to allow clientless access to resources inside the network. Which feature must be enabled and configured to allow SSH applications to respond on the specified port 8889?

  A. auto applet download
  B. port forwarding
  C. web-type ACL
  D. HTTP proxy
  B. port forwarding

• Question 155:

  Which encryption and authentication algorithms does Cisco recommend when deploying a Cisco NGE supported VPN solution?

  A. AES-GCM and SHA-2
  B. 3DES and DH
  C. AES-CBC and SHA-1
  D. 3DES and SHA-1
  A. AES-GCM and SHA-2

• Question 156:

  Scenario

  Your organization has just implemented a Cisco AnyConnect SSL VPN solution. Using Cisco ASDM, answer the questions regarding the implementation. Note: Not all screens or option selections are active for this exercise.

  

  Topology

  

  Default_Home

  

  

  

  

  

  

  

  

  Which address pool is being assigned to the users connecting via the AnyConnect client?

  A. Check the explanation
  A. Check the explanation

  ---

  Explanation:

  First Navigate to the Configuration -> Remote Access VPN tab and then choose the “AnyConnect Connection Profile as shown below:

  

  Then, clicking on the AnyConnect Profile at the bottom will bring you to the edit page shown below: From here we can see that the Client Address Pools in use is the “VPN_Access_Pool”

  

• Question 157:

  You are configuring a Cisco ASA for Clientless SSL VPN. Which command do you run to prevent web browsing from the Cisco SSL VPN portal page?

  A. url-list disable
  B. http server disable
  C. http-proxy 0.0.0.0
  D. url-entry disable
  D. url-entry disable

• Question 158:

  Which two features are required when configuring a DMVPN network? (Choose two.)

  A. Dynamic routing protocol
  B. GRE tunnel interface
  C. Next Hop Resolution Protocol
  D. Dynamic crypto map
  E. IPsec encryption
  B. GRE tunnel interface
  C. Next Hop Resolution Protocol

• Question 159:

  If Web VPN bookmarks are grayed out on the home screen, which action should you take to begin troubleshooting?

  A. Determine whether the Cisco ASA can resolve the DNS names.
  B. Determine whether the Cisco ASA has DNS forwarders set up.
  C. Determine whether an ACL is present to permit DNS forwarding.
  D. Replace the DNS name with an IP address.
  A. Determine whether the Cisco ASA can resolve the DNS names.

• Question 160:

  Which of the following could be used to configure remote access VPN Host-scan and pre- login policies?

  A. ASDM
  B. Connection-profile CLI command
  C. Host-scan CLI command under the VPN group policy
  D. Pre-login-check CLI command
  A. ASDM