Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 371:

  Scenario:

  You are the senior network security administrator for your organization. Recently and junior engineer configured a site-to-site IPsec VPN connection between your headquarters Cisco ASA and a remote branch office.

  You are now tasked with verifying the IKEvl IPsec installation to ensure it was properly configured according to designated parameters. Using the CLI on both the Cisco ASA and branch ISR. verify the IPsec configuration is properly

  configured between the two sites.

  NOTE: the show running-config command cannot be used for the this exercise.

  Topology:

  

  What is being used as the authentication method on the branch ISR?

  A. Certifcates
  B. Pre-shared public keys
  C. RSA public keys
  D. Diffie-Hellman Group 2
  B. Pre-shared public keys

• Question 372:

  Refer to the exhibit. Which type of VPN is used in the configuration?

  

  A. DMVPN
  B. FlexVPN
  C. SSL VPN
  D. Cisco GET VPN
  A. DMVPN

• Question 373:

  Which two statements about the Cisco ASA Clientless SSL VPN smart tunnels feature are true? (Choose two.)

  A. Smart tunnels are enabled on the secure gateway (Cisco ASA) for specific applications that run on the end client and work irrespective of which transport protocol the application uses.
  B. Smart tunnels require Administrative privileges to run on the client machine.
  C. A smart tunnel is a DLL that is pushed from the headend to the client machine after SSL VPN portal authentication and that is attached to smart-tunneled processes to route traffic through the SSL VPN session with the gateway.
  D. Smart tunnels offer better performance than the client-server plugins.
  E. Smart tunnels are supported on Windows, Mac, and Linux.
  C. A smart tunnel is a DLL that is pushed from the headend to the client machine after SSL VPN portal authentication and that is attached to smart-tunneled processes to route traffic through the SSL VPN session with the gateway.
  D. Smart tunnels offer better performance than the client-server plugins.

• Question 374:

  Which two features are available in the Plus license for Cisco AnyConnect? (Choose two.)

  A. Suite B cryptography
  B. Ipsec IKEv2
  C. Clientless SSL VPN
  D. Network Access Manager
  E. posture services
  D. Network Access Manager
  E. posture services

• Question 375:

  What is the default topology type for a GET VPN?

  A. point-to-point
  B. hub-and-spoke
  C. full mesh
  D. on-demand spoke-to-spoke
  C. full mesh

• Question 376:

  Which two GDOI encryption keys are used within a GET VPN network? (Choose two.)

  A. key encryption key
  B. group encryption key
  C. user encryption key
  D. traffic encryption key
  A. key encryption key
  D. traffic encryption key

• Question 377:

  Refer to the exhibit. An engineer is troubleshooting this configuration. Why is the VPN tunnel not functioning?

  

  A. AES 256 can't be used with IKEv1
  B. IKEv1 is not enabled
  C. The IKEv1 policy number should be at least 256
  D. There should be route for the 10.8.8.0/24 network configured
  B. IKEv1 is not enabled

• Question 378:

  Which option describes the purpose of the command show derived-config interface virtual-access 1?

  A. It verifies that the virtual access interface is cloned correctly with per-user attributes.
  B. It verifies that the virtual template created the tunnel interface.
  C. It verifies that the virtual access interface is of type Ethernet.
  D. It verifies that the virtual access interface is used to create the tunnel interface.
  A. It verifies that the virtual access interface is cloned correctly with per-user attributes.

• Question 379:

  Refer to the exhibit. Which action must be taken before adding users to the local certificate authority server database?

  

  A. Enable the CA server
  B. Set the CA Server key size
  C. Set and confirm a passphrase
  D. Configure the Server Name/IP Address
  A. Enable the CA server

• Question 380:

  An enginer must Setup Site-to-Site VPN with any-to-any topology that provides secure routing across backbone. which VPN techology allows a shared IPSEC SA to be used?

  A. FlexVPN
  B. IPSEC VPN
  C. GET VPN
  D. DMVPN
  C. GET VPN