Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 281:

  Refer to the exhibit. A new NOC engineer is troubleshooting a VPN connection.

  Which statement about the fields within the Cisco VPN Client Statistics screen is correct?

  

  A. The ISP-assigned IP address of 10.0.21.1 is assigned to the VPN adapter of the PC.
  B. The IP address of the security appliance to which the Cisco VPN Client is connected is 192.168.1.2.
  C. CorpNet is the name of the Cisco ASA group policy whose tunnel parameters the connection is using.
  D. The ability of the client to send packets transparently and unencrypted through the tunnel for test purposes is turned off.
  E. With split tunneling enabled, the Cisco VPN Client registers no decrypted packets.
  B. The IP address of the security appliance to which the Cisco VPN Client is connected is 192.168.1.2.

• Question 282:

  What URL do you use to download a packet capture file in a format which can be used by a packet analyzer?

  A. ftp:///capture//
  B. https:////
  C. https:///admin/capture//pcap
  D. https:////pcap
  C. https:///admin/capture//pcap

• Question 283:

  Which protocol does DTLS use for its transport?

  A. TCP
  B. UDP
  C. IMAP
  D. DDE
  B. UDP

• Question 284:

  Which three configurations are required for both IPsec VTI and crypto map-based VPNs? (Choose three.)

  A. transform set
  B. ISAKMP policy
  C. ACL that defines traffic to encrypt
  D. dynamic routing protocol
  E. tunnel interface
  F. IPsec profile
  G. PSK or PKI trustpoint with certificate
  A. transform set
  B. ISAKMP policy
  G. PSK or PKI trustpoint with certificate

• Question 285:

  What action does the hub take when it receives a NHRP resolution request from a spoke for a network that exists behind another spoke?

  A. The hub sends back a resolution reply to the requesting spoke.
  B. The hub updates its own NHRP mapping.
  C. The hub forwards the request to the destination spoke.
  D. The hub waits for the second spoke to send a request so that it can respond to both spokes.
  C. The hub forwards the request to the destination spoke.

• Question 286:

  

  

  Based on the provided ASDM configuration for the remote ASA, which one of the following is correct?

  A. An access-list must be configured on the outside interfaceto permit inbound VPN traffic
  B. A route to 192.168.22.0/24 will not be automatically installed in the routing table
  C. The ASA will use a window of 128 packets (64x2) to perform the anti-replay check _
  D. The tunnel can also be established on TCP port 10000
  C. The ASA will use a window of 128 packets (64x2) to perform the anti-replay check _

• Question 287:

  An administrator received a report that a user cannot connect to the headquarters site using Cisco AnyConnect and receives this error. The installer was not able to start the Cisco VPN client, clientless access is not available, Which option is a possible cause for this error?

  A. The client version of Cisco AnyConnect is not compatible with the Cisco ASA software image.
  B. The operating system of the client machine is not supported by Cisco AnyConnect.
  C. The driver for Cisco AnyConnect is outdatate.
  D. The installed version of Java is not compatible with Cisco AnyConnect.
  A. The client version of Cisco AnyConnect is not compatible with the Cisco ASA software image.

• Question 288:

  Refer to the exhibit. You have a Clientless SSL VPN service on a Cisco ASA. Which situation prevents the user from connecting?

  

  A. The user has a non-Cisco VPN client
  B. The user's browser is incompatible
  C. The user is behind a web proxy
  D. The Clientless SSL VPN protocol is disabled
  D. The Clientless SSL VPN protocol is disabled

• Question 289:

  Which transform set is contained in the IKEv2 default proposal?

  A. aes-cbc-192, sha256, group 14
  B. 3des, md5, group 7
  C. 3des, sha1, group 1
  D. aes-cbc-128, sha, group 5
  D. aes-cbc-128, sha, group 5

• Question 290:

  A custom desktop application needs to access an internal server. An administrator is tasked with configuring the company's SSL VPN gateway to allow remote users to work. Which two technologies would accommodate the company's requirement? (Choose two).

  A. AnyConnect client
  B. Smart Tunnels
  C. Email Proxy
  D. Content Rewriter
  E. Portal Customizations
  A. AnyConnect client
  B. Smart Tunnels