Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 361:

  DRAG DROP

  Drag and drop the steps on the left into the correct order of DMVPN process execution for quick mode exchange on the right.

  Select and Place:

  

  

• Question 362:

  An engineer is configuring SSL VPN for remote access. A real-time application that is sensitive to packet delays will be used. Which feature should the engineer confirm is enabled to avoid latency and bandwidth problems associated with SSL connections?

  A. DTLS
  B. DPD
  C. SVC
  D. IKEv2
  A. DTLS

• Question 363:

  Which purpose of configuring perfect Forward secret is true?

  A. For every negotiation of a new phase 1 SA, the two gateways generate a new set of phase 2 keys.
  B. For every negotiation of a new phase 2 SA, the two gateways generate a new set of phase 1 keys.
  C. For every negotiation of a new phase 1 SA, the two gateways generate a new set of phase 1 keys.
  D. For every negotiation of a new phase 2 SA, the two gateways generate a new set of phase 2 keys.
  B. For every negotiation of a new phase 2 SA, the two gateways generate a new set of phase 1 keys.

• Question 364:

  A spoke has two Internet connections for failover. How can you achieve optimum failover without affecting any other router in the DMVPN cloud?

  A. Create another DMVPN cloud by configuring another tunnel interface that is sourced from the second ISP link.
  B. Use another router at the spoke site, because two ISP connections on the same router for the same hub is not allowed.
  C. Configure SLA tracking, and when the primary interface goes down, manually change the tunnel source of the tunnel interface.
  D. Create another tunnel interface with same configuration except the tunnel source, and configure the if-state nhrp and backup interface commands on the primary tunnel interface.
  D. Create another tunnel interface with same configuration except the tunnel source, and configure the if-state nhrp and backup interface commands on the primary tunnel interface.

• Question 365:

  Which cryptographic method provides passphrase protection while importing or exporting keys?

  A. AES
  B. RSA
  C. Serpent
  D. Blowfish
  B. RSA

• Question 366:

  Which statement is correct concerning the trusted network detection (TND) feature?

  A. The Cisco AnyConnect 3.0 Client supports TND on Windows, Mac, and Linux platforms.
  B. With TND, one result of a Cisco Secure Desktop basic scan on an endpoint is to determine whether a device is a member of a trusted or an untrusted network.
  C. If enabled, and a CSD scan determines that a host is a member of an untrusted network, an administrator can configure the TND feature to prohibit an end user from launching the Cisco AnyConnect VPN Client.
  D. When the user is inside the corporate network, TND can be configured to automatically disconnect a Cisco AnyConnect session.
  D. When the user is inside the corporate network, TND can be configured to automatically disconnect a Cisco AnyConnect session.

• Question 367:

  A company wants to validate hosts before allowing them on the network via remote access VPN. Which Dynamic Access Policies (DAP) method provides additional host level validation?

  A. TACACS check
  B. folder check
  C. file check
  D. hostname check
  D. hostname check

• Question 368:

  Refer to the exhibit. Which type of VPN is being configured, based on the partial configuration snippet?

  

  A. DMVPN with dual hub
  B. GET VPN with dual group member
  C. FlexVPN backup gateway
  D. GET VPN with COOP key server
  E. FlexVPN load balancer
  D. GET VPN with COOP key server

• Question 369:

  Which three plugins are available for clientless SSL VPN? (Choose three.)

  A. CIFS
  B. RDP2
  C. SSH
  D. VNC
  E. SQLNET
  F. ICMP
  B. RDP2
  C. SSH
  D. VNC

• Question 370:

  What are two benefits of using DTLS when implementing a Cisco AnyConnect SSL VPN on a Cisco ASA or router ? (Choose two)

  A. has enhanced dead peer detection
  B. Provides latency avoidance
  C. establishes two simultaneous tunnels
  D. provides greater security and integrity of the tunnel
  E. uses TLS Only for the tunnel
  A. has enhanced dead peer detection
  B. Provides latency avoidance