Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 31:

  What advantage does elliptic curve cryptography have over RSA cryptography?

  A. ECC has wider industry adoption
  B. ECC compress the enciphered data
  C. ECC utilizes symmetric encryption for greater performance
  D. ECC provides greater security with a smaller key size
  D. ECC provides greater security with a smaller key size

• Question 32:

  Which two statements about the Cisco ASA Clientless SSL VPN solution are true? (Choose two.)

  A. When a client connects to the Cisco ASA WebVPN portal and tries to access HTTP resources through the URL bar, the client uses the local DNS to perform FQDN resolution.
  B. The rewriter enable command under the global webvpn configuration enables the rewriter functionality because that feature is disabled by default.
  C. A Cisco ASA with an AnyConnect Premium Peers license can simultaneously allow Clientless SSL VPN sessions and AnyConnect client sessions.
  D. Content rewriter functionality in the Clientless SSL VPN portal is not supported on Apple mobile devices.
  E. Clientless SSLVPN provides Layer 3 connectivity into the secured network.
  C. A Cisco ASA with an AnyConnect Premium Peers license can simultaneously allow Clientless SSL VPN sessions and AnyConnect client sessions.
  D. Content rewriter functionality in the Clientless SSL VPN portal is not supported on Apple mobile devices.

• Question 33:

  Refer to the exhibit. Which technology does this configuration demonstrate?

  

  A. AnyConnect SSL over IPv4+IPv6
  B. AnyConnect FlexVPN over IPv4+IPv6
  C. AnyConnect FlexVPN IPv6 over IPv4
  D. AnyConnect SSL IPv6 over IPv4
  B. AnyConnect FlexVPN over IPv4+IPv6

• Question 34:

  Which benefit of FlexVPN is not offered by DMVPN using IKEv1?

  A. Dynamic routing protocols can be configured.
  B. IKE implementation can install routes in routing table.
  C. GRE encapsulation allows for forwarding of non-IP traffic.
  D. NHRP authentication provides enhanced security.
  B. IKE implementation can install routes in routing table.

• Question 35:

  Scenario

  Your organization has just implemented a Cisco AnyConnect SSL VPN solution. Using Cisco ASDM, answer the questions regarding the implementation.

  Note: Not all screens or option selections are active for this exercise.

  

  Topology

  

  Default_Home

  

  

  

  

  

  

  

  

  What two actions will be taken on translated packets when the AnyConnect users connect to the ASA? (Choose two.)

  A. Check the explanation
  A. Check the explanation

  ---

  Explanation:

  First, navigate to the Configuration ->NAT Rules tab to see this:

  

  Here we see that NAT rule 2 applies to the AnyConnect clients, click on this rule for more details to see the following:

  

  Here we see that it is a static source NAT entry, but that the Source and Destination addresses remain the original IP address so they are not translated.

• Question 36:

  Which technology can rate-limit the number of tunnels on a DMVPN hub when system utilization is above a specified percentage?

  A. NHRP Event Publisher
  B. interface state control
  C. CAC
  D. NHRP Authentication
  E. ip nhrp connect
  C. CAC

• Question 37:

  Refer to the exhibit. You executed the show crypto ipsec sa command to troubleshoot an IPSec issue. What problem does the given output indicate?

  

  A. IKEv2 failed to establish a phase 2 negotiation.
  B. The Crypto ACL is different on the peer device.
  C. ISAKMP was unable to find a matching SA.
  D. IKEv2 was used in aggressive mode.
  B. The Crypto ACL is different on the peer device.

• Question 38:

  Which command simplifies the task of converting an SSL VPN to an IKEv2 VPN on a Cisco ASA appliance that has an invalid IKEv2 configuration?

  A. migrate remote-access ssl overwrite
  B. migrate remote-access ikev2
  C. migrate l2l
  D. migrate remote-access ssl
  A. migrate remote-access ssl overwrite

• Question 39:

  Which cryptographic algorithms are a part of the Cisco NGE suite?

  A. HIPPA DES
  B. AES-CBC-128
  C. RC4-128
  D. AES-GCM-256
  D. AES-GCM-256

• Question 40:

  Refer to the exhibit. Which exchange does this debug output represent?

  

  A. IKE Phase 1
  B. IKE Phase 2
  C. symmetric key exchange
  D. certificate exchange
  A. IKE Phase 1