Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 11:

  What is a functional difference between IKEV1 and IKEV2 on a router?

  A. HSRP
  B. RRI
  C. DPD
  D. Stateful Failover
  C. DPD

• Question 12:

  Where must an engineer configure a preshared key for site-to-site VPN tunnel configured on a Cisco ASA?

  A. crypto map
  B. group policy
  C. tunnel group
  D. isakmp policy
  C. tunnel group

• Question 13:

  An engineer is troubleshooting DMVPN and has entered the show crypto isakmp sa command. What can be verified with the output of this command?

  A. NHRP registration is complete
  B. the mGRE tunnel key matches the remote peer
  C. per-Qos policies have been applied
  D. IKE connectivity to branch offices has been established
  D. IKE connectivity to branch offices has been established

• Question 14:

  An administrator desires that when work laptops are not connected to the corporate network, they should automatically initiate an AnyConnect VPN tunnel back to headquarters. Where does the administrator configure this?

  A. Via the svc trusted-network command under the group-policy sub-configuration mode on the ASA
  B. Under the "Automatic VPN Policy" section inside the Anyconnect Profile Editor within ASDM
  C. Under the TNDPolicy XML section within the Local Preferences file on the client computer
  D. Via the svc trusted-network command under the global webvpn sub-configuration mode on the ASA
  B. Under the "Automatic VPN Policy" section inside the Anyconnect Profile Editor within ASDM

• Question 15:

  Which configuration construct must be used in a FlexVPN tunnel?

  A. multipoint GRE tunnel interface
  B. IKEv1 policy
  C. IKEv2 profile
  D. EAP configuration
  C. IKEv2 profile

• Question 16:

  A customer requires site-to-site VPNs to connect to third party business partners and has purchased two ASAs. The customer requests an active/active configuration. Winch mode is needed to support and active/active solution?

  A. single context
  B. NAT context
  C. PAT context
  D. multiple context
  D. multiple context

• Question 17:

  Which two statements describe effects of the DoNothing option within the untrusted network policy on a Cisco AnyConnect profile? (Choose two.)

  A. The client initiates a VPN connection upon detection of an untrusted network.
  B. The client initiates a VPN connection upon detection of a trusted network.
  C. The always-on feature is enabled.
  D. The always-on feature is disabled.
  E. The client does not automatically initiate any VPN connection.
  D. The always-on feature is disabled.
  E. The client does not automatically initiate any VPN connection.

• Question 18:

  Which equation describes an elliptic curve?

  A. y3 = x3 + ax + b
  B. x3 = y2 + ab + x
  C. y4 = x2 + ax + b
  D. y2 = x3 + ax + b
  E. y2 = x2 + ax + b2
  D. y2 = x3 + ax + b

• Question 19:

  A network administrator has deployed Cisco, AnyConnect Secure Mobility Client to each member of the sales force. Which option is the verification method for tins deployment?

  A. RADIUS server
  B. AM authentication
  C. NI domain
  D. RSA SDI
  A. RADIUS server

• Question 20:

  Refer to the exhibit. The customer can establish an AnyConnect connection on the first attempt only. Subsequent attempts fail. What might be the issue?

  

  A. IKEv2 is blocked over the path.
  B. UserGroup must be different than the name of the connection profile.
  C. The primary protocol should be SSL.
  D. UserGroup must be the same as the name of the connection profile.
  D. UserGroup must be the same as the name of the connection profile.