Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 51:

  An engineer has deployed Cisco IOS crypto-map based VPN and wants to ensure that state information is shared in an HA group.

  Which high availability technology must be used?

  A. SSL
  B. GLBP
  C. HSRP
  D. VRRP
  C. HSRP

• Question 52:

  An IOS SSL VPN is configured to forward TCP ports. A remote user cannot access the corporate FTP site with a Web browser. What is a possible reason for the failure?

  A. The user's FTP application is not supported.
  B. The user is connecting to an IOS VPN gateway configured in Thin Client Mode.
  C. The user is connecting to an IOS VPN gateway configured in Tunnel Mode.
  D. The user's operating system is not supported.
  B. The user is connecting to an IOS VPN gateway configured in Thin Client Mode.

• Question 53:

  An Engineer must configure GETVPN to transfer over the network between corporate offices. which two options are the advantages to choose GETVPN over EZVPN? (TWO)

  A. GETVPN is highly scalable any to any mesh topology
  B. GETVPN has QoS support
  C. GETVPN has unique session keys for improved security
  D. GETVPN supports multicast
  E. GET VPN supports a hub-and -spoke topology
  B. GETVPN has QoS support
  D. GETVPN supports multicast

• Question 54:

  On which Cisco platform are dynamic virtual template interfaces available?

  A. Cisco Adaptive Security Appliance 5585-X
  B. Cisco Catalyst 3750X
  C. Cisco Integrated Services Router Generation 2
  D. Cisco Nexus 7000
  C. Cisco Integrated Services Router Generation 2

• Question 55:

  

  Refer to the exhibit. Which result of running the command is true?

  A. authenticates the IKEv2 peers in the 172.16.0.0/16 range by using the cisco123 key
  B. secures all the certificates in the IKE exchange by using the cisco123 key
  C. authenticates the IKEv1 peers in the 172.16.0.0/16 range by using the cisco123 key
  D. authenticates the IP address of the 172.16.0.0/32 peer by using the cisco123 key
  C. authenticates the IKEv1 peers in the 172.16.0.0/16 range by using the cisco123 key

• Question 56:

  As network consultant, you are asked to suggest a VPN technology that can support a multivendor environment and secure traffic between sites. Which technology should you recommend?

  A. DMVPN
  B. FlexVPN
  C. GET VPN
  D. SSL VPN
  B. FlexVPN

• Question 57:

  Which feature is enabled by the use of NHRP in a DMVPN network?

  A. host routing with Reverse Route Injection
  B. BGP multiaccess
  C. host to NBMA resolution
  D. EIGRP redistribution
  C. host to NBMA resolution

• Question 58:

  Refer to the exhibit. VPN load balancing provides a way to distribute remote access, IPsec, and SSL VPN connections across multiple security appliances. Which remote access client types does the load balancing feature support?

  

  A. IPsec site-to-site tunnels
  B. L2TP over IPsec C. OpenVPN
  D. Cisco AnyConnect Secure Mobility Client
  D. Cisco AnyConnect Secure Mobility Client

• Question 59:

  You are configuring a Cisco IOS SSL VPN gateway to operate with DVTI support. Which command must you configure on the virtual template?

  A. tunnel protection ipsec
  B. ip virtual-reassembly
  C. tunnel mode ipsec
  D. ip unnumbered
  D. ip unnumbered

• Question 60:

  Which two options are features of Cisco GET VPN? (Choose two.)

  A. Allows for optimal routing
  B. provides point to point IPsec SA
  C. Provides encryption for MPLS
  D. uses public Internet
  E. uses MORE
  A. Allows for optimal routing
  C. Provides encryption for MPLS