Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 391:

  When you are configuring a DMVPN network, which tunnel mode should you use for the hub router configuration?

  A. GRE multipoint
  B. classic point-to-point GRE
  C. IPsec multipoint
  D. nonbroadcast multiaccess
  A. GRE multipoint

• Question 392:

  What are two benefits of using DTLS when implementing a Cisco AnyConnect SSL VPN on a Cisco ASA or router ? (Choose two)

  A. has enhanced dead peer detection
  B. Provides latency avoidance
  C. establishes two simultaneous tunnels
  D. provides greater security and integrity of the tunnel
  E. uses TLS Only for the tunnel
  A. has enhanced dead peer detection
  B. Provides latency avoidance

• Question 393:

  What is the Cisco recommended TCP maximum segment on a DMVPN tunnel interface when the MTU is set to 1400 bytes?

  A. 1160 bytes
  B. 1260 bytes
  C. 1360 bytes
  D. 1240 bytes
  C. 1360 bytes

• Question 394:

  Which algorithm provides both encryption and authentication for data plane communication?

  A. SHA-96
  B. SHA-384
  C. 3DES
  D. AES-256
  E. AES-GCM
  F. RC4
  E. AES-GCM

• Question 395:

  Refer to the exhibit. You are configuring a laptop with the Cisco VPN Client, which uses digital certificates for authentication.

  

  Which protocol does the Cisco VPN Client use to retrieve the digital certificate from the CA server?

  A. FTP
  B. LDAP
  C. HTTPS
  D. SCEP
  E. OCSP
  D. SCEP

• Question 396:

  Which two IKEv1 policy options must match on each peer when you configure an IPsec site-to- site VPN? (Choose two.)

  A. priority number
  B. hash algorithm
  C. encryption algorithm
  D. session lifetime
  E. PRF algorithm
  B. hash algorithm
  C. encryption algorithm

• Question 397:

  Which two options are purposes of the key server in Cisco IOS GETVPN? (Choose two.)

  A. to distributed static routing information
  B. to authenticate group members
  C. to define and distribute security policies
  D. to distribute dynamic routing information
  E. to encrypt transit data traffic.
  B. to authenticate group members
  E. to encrypt transit data traffic.

• Question 398:

  An engineer notices that while an employee is connected remotely, all traffic is being routed to the corporate network. Which split-tunnel policy allows a remote client to use their local provide for internet access when working from home?

  A. exclude specified.
  B. tunnel all
  C. No policy allows that type of configuration.
  D. tunnel specified
  D. tunnel specified

• Question 399:

  An engineer must set up DMPN Phase2 with EIGRP to ensure spoke-to-spoke communication. Which two EIGRP features must be disabled?

  A. stub routing
  B. split horizon
  C. route redistribution
  D. auto-summary
  E. next-hop self
  B. split horizon
  E. next-hop self

• Question 400:

  Which statement about CRL configuration is correct?

  A. CRL checking is enabled by default.
  B. The Cisco ASA relies on HTTPS access to procure the CRL list.
  C. The Cisco ASA relies on LDAP access to procure the CRL list.
  D. The Cisco Secure ACS can be configured as the CRL server.
  C. The Cisco ASA relies on LDAP access to procure the CRL list.