Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 181:

  The Cisco AnyConnect client is unable to download an updated user profile from the ASA headend using IKEv2. What is the most likely cause of this problem?

  A. User profile updates are not allowed with IKEv2.
  B. IKEv2 is not enabled on the group policy.
  C. A new profile must be created so that the adaptive security appliance can push it to the client on the next connection attempt.
  D. Client Services is not enabled on the adaptive security appliance.
  D. Client Services is not enabled on the adaptive security appliance.

• Question 182:

  A rogue static route is installed in the routing table of a Cisco FlexVPN and is causing traffic to be blackholed. Which command should be used to identify the peer from which that route originated?

  A. show crypto ikev2 sa detail
  B. show crypto route
  C. show crypto ikev2 client flexvpn
  D. show ip route eigrp
  E. show crypto isakmp sa detail
  A. show crypto ikev2 sa detail

• Question 183:

  What does NHRP stand for?

  A. Next Hop Resolution Protocol
  B. Next Hop Registration Protocol
  C. Next Hub Routing Protocol
  D. Next Hop Routing Protocol
  A. Next Hop Resolution Protocol

• Question 184:

  Your corporate finance department purchased a new non-web-based TCP application tool to run on one of its servers.

  Certain finance employees need remote access to the software during nonbusiness hours. These employees do not have "admin" privileges to their PCs.

  What is the correct way to configure the SSL VPN tunnel to allow this application to run?

  A. Configure a smart tunnel for the application.
  B. Configure a "finance tool" VNC bookmark on the employee clientless SSL VPN portal.
  C. Configure the plug-in that best fits the application.
  D. Configure the Cisco ASA appliance to download the Cisco AnyConnect SSL VPN Client to the finance employee each time an SSL VPN tunnel is established.
  A. Configure a smart tunnel for the application.

• Question 185:

  Refer to the exhibit. The IKEv2 site-to-site VPN tunnel between two routers is down. Based on the debug output, which type of mismatch might be the problem?

  

  A. PSK
  B. crypto policy
  C. peer identity
  D. transform set
  C. peer identity

• Question 186:

  The following configuration steps have been completed: WebVPN was enabled on the ASA outside interface. ?SSL VPN client software was loaded to the ASA. ?A DHCP scope was configured and applied to a WebVPN Tunnel Group. What additional step is required if the client software fails to load when connecting to the ASA SSL page?

  A. The SSL client must be loaded to the client by an ASA administrator
  B. The SSL client must be downloaded to the client via FTP
  C. The SSL VPN client must be enabled on the ASA after loading
  D. The SSL client must be enabled on the client machine before loading
  C. The SSL VPN client must be enabled on the ASA after loading

• Question 187:

  You have been using pre-shared keys for IKE authentication on your VPN.

  Your network has grown rapidly, and now you need to create VPNs with numerous IPsec peers.

  How can you enable scaling to numerous IPsec peers?

  A. Migrate to external CA-based digital certificate authentication.
  B. Migrate to a load-balancing server.
  C. Migrate to a shared license server.
  D. Migrate from IPsec to SSL VPN client extended authentication.
  A. Migrate to external CA-based digital certificate authentication.

• Question 188:

  Which two cryptographic technologies are recommended for use with FlexVPN? (Choose two.)

  A. SHA (HMAC variant)
  B. Diffie-Hellman
  C. DES
  D. MD5 (HMAC variant)
  A. SHA (HMAC variant)
  B. Diffie-Hellman

• Question 189:

  Which alogrithm is an example of asymmetric encryption?

  A. RC4
  B. AES
  C. ECDSA
  D. 3DES
  C. ECDSA

• Question 190:

  When you configure IPsec VPN High Availability Enhancements, which technology does Cisco recommend that you enable to make reconvergence faster?

  A. EOT
  B. IP SLAs
  C. periodic IKE keepalives
  D. VPN fast detection
  C. periodic IKE keepalives