Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 341:

  Refer to the exhibit. Client 1 cannot communication with Client 2. Both clients are using Cisco AnyConnect and have established a successful SSL VPN connection to the hub ASA. Which command on the ASA is missing?

  

  A. same-security-traffic permit inter-interface
  B. same-security-traffic permit intra-interface
  C. dns-server value 10.1.1.3
  D. split-tunnel-network list
  B. same-security-traffic permit intra-interface

• Question 342:

  An engineer is configuring an IKEV1 tunnel. Which two Diffie- Hellman group values for this implementation? (Choose two)

  A. 2
  B. 5
  C. 10
  D. 14
  E. 19
  A. 2
  B. 5

• Question 343:

  An engineer is assisting in the continued implementation of a VPN solution and discovers an NHRP server configuration. Which type of VPN solution has been implemented?

  A. DM VPN
  B. IPsec VPN
  C. SSL VPN
  D. GET VPN
  A. DM VPN

• Question 344:

  

  Refer to the exhibit. You implement a DMVPN Phase 3 full-mesh design. Spoke-to-spoke tunnels fail to establish successfully via the hub. Which action do you take in the hub configuration to resolve the issue?

  A. Configure the hub to set itself as the next hop in the routing updates to the spokes.
  B. Configure the hub tunnel as a point-to-point GRE tunnel interface.
  C. Enable split horizon for EIGRP
  D. Configure a loopback interface as the source of the tunnel interface
  A. Configure the hub to set itself as the next hop in the routing updates to the spokes.

• Question 345:

  Which two technologies are considered to be Suite B cryptography? (Choose two.)

  A. MD5
  B. SHA2
  C. Elliptical Curve Diffie-Hellman
  D. 3DES
  E. DES
  B. SHA2
  C. Elliptical Curve Diffie-Hellman

• Question 346:

  Which option describes what address preservation with IPsec Tunnel Mode allows when GETVPN is used?

  A. stronger encryption methods
  B. Network Address Translation of encrypted traffic
  C. traffic management based on original source and destination addresses
  D. Tunnel Endpoint Discovery
  C. traffic management based on original source and destination addresses

• Question 347:

  Which option is one of the difference between FlexVPN and DMVPN?

  A. flexvpn uses ikev2 and dmvpn can use ikev1 or ikev2
  B. dmvpn can use ikev1 and ikev2 where flexvpn only uses ikev1
  C. flexvpn can use ikev1 and ikev2 where dmvpn uses only ikev2
  D. dmvp uses ikev1 and flexvpn use ikev3
  A. flexvpn uses ikev2 and dmvpn can use ikev1 or ikev2

• Question 348:

  Which statement about the local and remote methods in an IKEv2 authentication exchange is true?

  A. There must be one local and two remote methods
  B. They must be different
  C. They must be the same
  D. They must be the same or different
  C. They must be the same

• Question 349:

  Which of these are the two types of keys used when implementing GET VPN? (Choose two)

  A. key encryption
  B. group encryption
  C. pre-shared key
  D. public key
  E. private key
  F. traffic encryption key
  A. key encryption
  F. traffic encryption key

• Question 350:

  Regarding licensing, which option will allow IKEv2 connections on the adaptive security appliance?

  A. AnyConnect Essentials can be used for Cisco AnyConnect IKEv2 connections.
  B. IKEv2 sessions are not licensed.
  C. The Advanced Endpoint Assessment license must be installed to allow Cisco AnyConnect IKEv2 sessions.
  D. Cisco AnyConnect Mobile must be installed to allow AnyConnect IKEv2 sessions.
  A. AnyConnect Essentials can be used for Cisco AnyConnect IKEv2 connections.