Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 381:

  Which type of communication in a FlexVPN implementation uses an NHRP shortcut?

  A. spoke to hub
  B. spoke to spoke
  C. hub to spoke
  D. hub to hub
  B. spoke to spoke

• Question 382:

  Which statement describes a prerequisite for single-sign-on Netegrity Cookie Support in an IOC SSL VPN?

  A. The Cisco AnyConnect Secure Mobility Client must be installed in flash.
  B. A SiteMinder plug-in must be installed on the Cisco SSL VPN gateway.
  C. A Cisco plug-in must be installed on a SiteMinder server.
  D. The Cisco Secure Desktop software package must be installed in flash.
  C. A Cisco plug-in must be installed on a SiteMinder server.

• Question 383:

  Refer to the Exhibit. An engineer must implement DMVPN phase 2 and two conclusions can be made from the configuration? (Choose two.)

  

  A. Spoke-to-spoke communication is allowed.
  B. Next-hop-self is required.
  C. EIGRP neighbor adjacency will fail.
  D. EIGRP route redistribution is not allowed
  E. EIGRP used as the dynamic routing protocol.
  A. Spoke-to-spoke communication is allowed.
  E. EIGRP used as the dynamic routing protocol.

• Question 384:

  Which two methods customize the installation of the Cisco AnyConnect client? (Choose two.)

  A. installation profiles
  B. command-line parameters
  C. client profiles
  D. resource profiles
  E. installer transforms
  B. command-line parameters
  E. installer transforms

• Question 385:

  Which group-policy subcommand installs the Diagnostic AnyConnect Report Tool on user computers when a Cisco AnyConnect user logs in?

  A. customization value dart
  B. file-browsing enable
  C. smart-tunnel enable dart
  D. anyconnect module value dart
  D. anyconnect module value dart

• Question 386:

  Which is used by GETVPN, FlexVPN and DMVPN?

  A. NHRP
  B. MPLS
  C. GRE
  D. ESP
  D. ESP

• Question 387:

  Refer to the Exhibit. All internal clients behind the ASA are port address translated to the public outside interface, which has an IP address of 3.3.3.3. Client 1 and Client 2 have established successful SSL VPN connections to the ASA. However, when either client performs a browser search on their IP address, it shows up as 3.3.3.3.

  

  Why is the happening when both clients have a direct connection to the local internet service provider?

  A. Same-security-traffic permit inter-interface has not been configured.
  B. Tunnel All Networks is configured under Group Policy.
  C. Exclude Network List Below is configured under Group Policy.
  D. Tunnel Network List Below is configured under Group Policy.
  B. Tunnel All Networks is configured under Group Policy.

• Question 388:

  Which option is a required element of Secure Device Provisioning communications?

  A. the introducer
  B. the certificate authority
  C. the requestor
  D. the registration authority
  A. the introducer

• Question 389:

  What is a valid reason for configuring a list of backup servers on the Cisco AnyConnect VPN Client profile?

  A. to access a backup authentication server
  B. to access a backup DHCP server
  C. to access a backup VPN server
  D. to access a backup CA server
  C. to access a backup VPN server

• Question 390:

  Which VPN technology preserves IP headers and prevents overlay routing?

  A. site-to-site VPN
  B. GET VPN
  C. Cisco Easy VPN
  D. DMVPN
  B. GET VPN