Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 401:

  Which algorithm does ISAKMP use to securely derive encryption and integrity keys?

  A. Diffie-Hellman
  B. AES
  C. ECDSA
  D. RSA
  E. 3DES
  A. Diffie-Hellman

• Question 402:

  Which feature do you include in a highly available system to account for potential site failures?

  A. geographical separation of redundant devices
  B. hot/standby failover pairs
  C. Cisco ACE load-balancing with VIP
  D. dual power supplies
  A. geographical separation of redundant devices

• Question 403:

  What does DART stand for?

  A. Device and report tool
  B. Diagnostic Anyconnect Reporting Tool
  C. Delivery and Reporting Tool
  D. Diagnostics and Reporting Tool
  D. Diagnostics and Reporting Tool

• Question 404:

  Which three remote access VPN methods in an ASA appliance provide support for Cisco Secure Desktop? (Choose three.)

  A. IKEv1
  B. IKEv2
  C. SSL client
  D. SSL clientless
  E. ESP
  F. L2TP
  B. IKEv2
  C. SSL client
  D. SSL clientless

• Question 405:

  Refer to the exhibit.

  

  After the configuration is performed, which combination of devices can connect?

  A. a device with an identity type of IPv4 address of 209.165.200.225 or 209.165.202.155 or a certificate with subject name of "cisco.com"
  B. a device with an identity type of IPv4 address of both 209.165.200.225 and 209.165.202.155 or a certificate with subject name containing "cisco.com"
  C. a device with an identity type of IPv4 address of both 209.165.200.225 and 209.165.202.155 and a certificate with subject name containing "cisco.com"
  D. a device with an identity type of IPv4 address of 209.165.200.225 or 209.165.202.155 or a certificate with subject name containing "cisco.com"
  D. a device with an identity type of IPv4 address of 209.165.200.225 or 209.165.202.155 or a certificate with subject name containing "cisco.com"

• Question 406:

  Which parameter in Ipsec VPN tunnel configurations is optional?

  A. lifetime
  B. Perfect Forward Secrecy
  C. encryption
  D. hash
  B. Perfect Forward Secrecy

• Question 407:

  Cisco AnyConnect VPN user receives this message every 30 mins. Secure VPN connection terminated locally by the client. Reason 428: Maximum connection Lifetime Exceeded

  A. ASA(config)# clear crypto isakmp sa
  B. ASA(config)# clear crypto ipsec sa
  C. ASA(config)# isakmp policy 1 lifetime 1800
  D. ASA(config)# isakmp policy 1 lifetime 0
  D. ASA(config)# isakmp policy 1 lifetime 0

• Question 408:

  Refer to the Exhibit. Users at each end of this VPN tunnel cannot communicate with each other. Which cause of this behavior is true?

  

  A. The Diffie-Hellman groups configured are different
  B. The pre shared key does not match.
  C. Phase 1 is not completed and troubleshooting is required.
  D. The issue occurs in phase 2 of the tunnel.
  C. Phase 1 is not completed and troubleshooting is required.

• Question 409:

  Refer to the exhibit. In the CLI snippet that is shown, what is the function of the deny option in the access list?

  

  A. When set in conjunction with outbound connection-type bidirectional, its function is to prevent the specified traffic from being protected by the crypto map entry.
  B. When set in conjunction with connection-type originate-only, its function is to instruct the Cisco ASA to deny specific inbound traffic if it is not encrypted.
  C. When set in conjunction with outbound connection-type answer-only, its function is to instruct the Cisco ASA to deny specific outbound traffic if it is not encrypted.
  D. When set in conjunction with connection-type originate-only, its function is to cause all IP traffic that matches the specified conditions to be protected by the crypto map.
  A. When set in conjunction with outbound connection-type bidirectional, its function is to prevent the specified traffic from being protected by the crypto map entry.

• Question 410:

  A network engineer is troubleshooting a site VPN tunnel configured on a Cisco ASA and wants to validate that the tunnel is sending and receiving traffic. Which command accomplishes this task?

  A. show crypto ikev1 sa peer
  B. show crypto ikev2 sa peer
  C. show crypto ipsec sa peer
  D. show crypto isakmp sa peer
  C. show crypto ipsec sa peer