Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 431:

  Which two changes must be made to migrate from DMVPN Phase 2 to Phase 3 when EIGRP is configured? (Choose two )

  A. Disable EIGRP next-hop-self on the hub.
  B. Enable EIGRP next-hop-self on the hub.
  C. Add NHRP shortcuts on the hub.
  D. Add NHRP redirects on the hub.
  E. Add NHRP redirects on the spoke.
  A. Disable EIGRP next-hop-self on the hub.
  D. Add NHRP redirects on the hub.

• Question 432:

  For Cisco IOS PKI, which two types of servers can be used as a distribution point for CRLs? (Choose two.)

  A. LDAP
  B. SDP
  C. subordinate CA
  D. SCP
  E. HTTP
  A. LDAP
  E. HTTP

• Question 433:

  Refer to the exhibit. An IPsec peer is exchanging routes using IKEv2, but the routes are not installed in the RIB. Which configuration error is causing the failure?

  

  A. IKEv2 routing requires certificate authentication, not pre-shared keys.
  B. An invalid administrative distance value was configured.
  C. The match identity command must refer to an access list of routes.
  D. The IKEv2 authorization policy is not referenced in the IKEv2 profile.
  B. An invalid administrative distance value was configured.

• Question 434:

  A customer has two ASAs configured in high availability and is experiencing connection drops that require re-establishment each time failover occurs. Which type of failover has been implemented?

  A. Stateless
  B. routed
  C. trans parent
  D. stateful
  A. Stateless

• Question 435:

  Which hash algorithm is required to protect classified information?

  A. MD5
  B. SHA-1
  C. SHA-256
  D. SHA-384
  D. SHA-384

• Question 436:

  Which access list are used in a typical IPsec VPN configuration?

  A. ACL to define policy based routing
  B. ACL for routing policy neighbors accross the tunnel
  C. ACL to NAT traffic accross the VPN tunnel
  D. ACL to define what traffic to exempt from NAT
  D. ACL to define what traffic to exempt from NAT

• Question 437:

  Refer to the Exhibit. Which statement about this output is true?

  

  A. Identity between endpoints is verified using a certificate authority
  B. The tunnel is not functional because NAT-T is not configured.
  C. This router has sent the first packet to establish the Flex VPN tunnel
  D. The remote device encrypts IKEv2 packets using key "282FE"0B3B5C99A2B".
  C. This router has sent the first packet to establish the Flex VPN tunnel

• Question 438:

  Which two options are purposes of the key server in Cisco IOS GETVPN? (Choose two)

  A. to distribute dynamic routing information
  B. to define and distribute security policies
  C. to encrypt transit data time
  D. to authenticate group members
  E. to distribute static routing information
  B. to define and distribute security policies
  D. to authenticate group members

• Question 439:

  Which technology must be installed on the client computer to enable users to launch applications from a Clientless SSL VPN?

  A. Java
  B. QuickTime plug-in
  C. Silverlight
  D. Flash
  A. Java

• Question 440:

  Which two option, are benefits of AES compared to 3DES? (Choose two.)

  A. switches encryption keys every 32 GB of data transfer
  B. faster encryption
  C. shorter encryption keys
  D. longer encryption block length
  E. repeating encryption keys
  B. faster encryption
  D. longer encryption block length