Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 261:

  Refer to the exhibit. A network administrator is running DMVPN with EIGRP, when the administrator looks at the routing table on spoken 1 it displays a route to the hub only. Which command is missing on the hub router, which includes spoke 2 and spoke 3 in the spoke 1 routing table?

  

  A. no inverse arp
  B. neighbor (ip address)
  C. no ip split-horizon egrp 1
  D. redistribute static
  C. no ip split-horizon egrp 1

• Question 262:

  Which two commands can you use to debug tunnel negotiation for an ASA using IKEv2? (Choose two.)

  A. debug crypto ikev2 error
  B. debug crypto ikev2
  C. debug crypto ikev2 protocol
  D. debug crypto ikev2 platform
  E. debug crypto ikev2 internal
  C. debug crypto ikev2 protocol
  D. debug crypto ikev2 platform

• Question 263:

  A Cisco IOS SSL VPN gateway is configured to operate in clientless mode so that users can access file shares on a Microsoft Windows 2003 server. Which protocol is used between the Cisco IOS router and the Windows server?

  A. HTTPS
  B. NetBIOS
  C. CIFS
  D. HTTP
  C. CIFS

• Question 264:

  Which command configures IKEv2 symmetric identity authentication?

  A. match identity remote address 0.0.0.0
  B. authentication local pre-share
  C. authentication pre-share
  D. authentication remote rsa-sig
  D. authentication remote rsa-sig

• Question 265:

  An engineer is configuring high availability for crypto-map-based site-to-site VPNs on Cisco IOS devices. Which protocol must be used?

  A. VRRP
  B. BFD
  C. ESP
  D. HSRP
  D. HSRP

• Question 266:

  Refer to the Exhibit. Which statement is accurate based on this configuration?

  

  A. Spoke 1 fails the authentication because the authentication methods are incorrect.
  B. Spoke 2 passes the authentication to the hub and successfully proceeds to phase 2.
  C. Spoke 1 passes the authentication to the hub and successfully proceeds to phase 2.
  D. Spoke 2 fails the authentication because the remote authentication method is incorrect.
  C. Spoke 1 passes the authentication to the hub and successfully proceeds to phase 2.

• Question 267:

  An engineer is configuring a site-to-site VPN tunnel. Which two IKEv1 parameters must match on both peers? (Choose two.)

  A. encryption algorithm
  B. access lists
  C. encryption domains
  D. QoS
  E. hashing method
  A. encryption algorithm
  E. hashing method

• Question 268:

  In a new DMVPN deployment, phase 1 completes successfully. However, phase2 experiences issues. Which troubleshooting step is valid in this situation?

  A. Temporarily remove encryption to check if the GRE tunnel is working.
  B. Verify IP routing between the external IPs of the two peers is correct.
  C. Remove NHRP configuration and reset the tunnels.
  D. Ensure that the nodes use the same authentication method.
  A. Temporarily remove encryption to check if the GRE tunnel is working.

• Question 269:

  A network engineer testing a clientless VPN connection on a local workstation sees the "Clientless (browser) SSL VPN access is not allowed" message in the web browser. Which command remediates the problem?

  A. auto-signon allow uri cifs://X.X.X.X/* auth-type all
  B. deny-message none
  C. vpn-tunnel-protocol ssl-clientless
  D. svc dtls enable
  C. vpn-tunnel-protocol ssl-clientless

• Question 270:

  Refer to exhibit. An engineer must implement DMVPN phase2 and was provided with this configuration by the senior engineer as a template. Which two conclusions can be made from the configuration? (choose two)

  interface Tunnel10 ip address 172.16.1.1 255.255.255.0 no ip redirects ip mtu 1440 ip nhrp authentication cisco ip nhrp map multicast dynamic ip nhrp network-id 150 no ip split-horizon eigrp 100 no ip next-hop-self eigrp 100 tunnel source GigabitEthernet0/0 tunnel mode gre multipoint tunnel key 0 tunnel protection ipsec profile cisco

  A. EIGRP is used as the dynamic routing protocol
  B. spoke-to-spoke communication is allowed
  C. EIGRP route redistribution is not allowed
  D. EIGRP neighbor adjacency will fail
  E. next-hop-self is required
  A. EIGRP is used as the dynamic routing protocol
  B. spoke-to-spoke communication is allowed