Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 191:

  Which of these is true regarding tunnel configuration when deploying a Cisco ISR as a DMVPN hub router?

  A. Only one tunnel can be created per tunnel source interface.
  B. Only one tunnel can be created and should be associated with a loopback interface for dynamic redundancy
  C. The GRE tunnel key is used to encrypt the traffic going through the tunnel through the hub.
  D. You can run multiple parallel DMVPNs on the hub router, but each tunnel requires a unique tunnel key.
  D. You can run multiple parallel DMVPNs on the hub router, but each tunnel requires a unique tunnel key.

• Question 192:

  What are three benefits of deploying a GET VPN? (Choose three.)

  A. It provides highly scalable point-to-point topologies.
  B. It allows replication of packets after encryption.
  C. It is suited for enterprises running over a DMVPN network.
  D. It preserves original source and destination IP address information.
  E. It simplifies encryption management through use of group keying.
  F. It supports non-IP protocols.
  B. It allows replication of packets after encryption.
  D. It preserves original source and destination IP address information.
  E. It simplifies encryption management through use of group keying.

• Question 193:

  A user is experiencing issues connection to a cisco Anyconnect VPN and receives this error message.

  The AnyConnect package on the secure gateway could not be located. You may be experiencing network connectivity issues.

  Please by connecting again. Which option is the likely cause of this issue?

  A. The user's operating system is not supported with the ASA's current configuration.
  B. The use laptop clock is not synchronized with NTP.
  C. The user is entering an incorrect password.
  D. The cisco ASA firewall has experienced a failure.
  A. The user's operating system is not supported with the ASA's current configuration.

• Question 194:

  A client has asked an engineer to assist in installing and upgrading to the latest version of cisco Anyconnect secure Mobility client. Which type of deployment method requires the updated version of the client to be loaded only on the headend device such as an ASA or ISE device?

  A. web-update
  B. pre-deploy
  C. web-deploy
  D. cloud-deploy
  E. cloud-update
  C. web-deploy

• Question 195:

  Which three changes must be made to migrate from DMVPN Phase 2 to Phase 3 when EIGRP is configured? (Choose three.)

  A. Enable EIGRP next-hop-self on the hub.
  B. Disable EIGRP next-hop-self on the hub.
  C. Enable EIGRP split-horizon on the hub.
  D. Add NHRP redirects on the hub.
  E. Add NHRP shortcuts on the spoke.
  F. Add NHRP shortcuts on the hub.
  B. Disable EIGRP next-hop-self on the hub.
  D. Add NHRP redirects on the hub.
  E. Add NHRP shortcuts on the spoke.

• Question 196:

  When troubleshooting clientless SSL VPN connections, which option can be verified on the client PC?

  A. address assignment
  B. DHCP configuration
  C. tunnel group attributes
  D. host file misconfiguration
  D. host file misconfiguration

• Question 197:

  Refer to the exhibit. What is the problem with the IKEv2 site-to-site VPN tunnel?

  

  A. incorrect PSK
  B. crypto access list mismatch
  C. incorrect tunnel group
  D. crypto policy mismatch
  E. incorrect certificate
  B. crypto access list mismatch

• Question 198:

  Refer to the exhibit. Which statement about the given IKE policy is true?

  

  A. The tunnel will be valid for 2 days, 88 minutes, and 00 seconds.
  B. It will use encrypted nonces for authentication.
  C. It has a keepalive of 60 minutes, checking every 5 minutes.
  D. It uses a 56-bit encryption algorithm.
  B. It will use encrypted nonces for authentication.

• Question 199:

  An Engineer wants to ensure that operating system and service packs on a remote device with a Cisco clientless SSL VPN are identified. Which feature must be used?

  A. keystroke logger detection
  B. host emulation detection
  C. host scan
  D. cache cleaner
  C. host scan

• Question 200:

  Refer to the exhibit. The customer needs to launch AnyConnect in the RDP machine. Which configuration is correct?

  

  A. crypto vpn anyconnect profile test flash:RDP.xml policy group default svc profile test
  B. crypto vpn anyconnect profile test flash:RDP.xml webvpn context GW_1 browser-attribute import flash:/swj.xml
  C. crypto vpn anyconnect profile test flash:RDP.xml policy group default svc profile flash:RDP.xml
  D. crypto vpn anyconnect profile test flash:RDP.xml webvpn context GW_1 browser-attribute import test
  A. crypto vpn anyconnect profile test flash:RDP.xml policy group default svc profile test