Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 71:

  Which technology is FlexVPN based on?

  A. OER
  B. VRF
  C. IKEv2
  D. an RSA nonce
  C. IKEv2

• Question 72:

  A company has acquired a competitor whose network infrastructure uses only IPv6. An engineer must configure VPN access sourced from the new company. Which remote access VPN solution must be used?

  A. GET VPN
  B. Any Connect
  C. EzVPN
  D. DMVPN
  C. EzVPN

• Question 73:

  An engineer has configured Cisco AnyConnect VPN using IKEv2 on a Cisco ISO router. The user cannot connect in the Cisco AnyConnect client, but receives an alert message "Use a browser to gain access." Which action does the engineer take to eliminate this issue?

  A. Reset user login credentials.
  B. Disable the HTTP server.
  C. Correct the URL address.
  D. Connect using HTTPS.
  B. Disable the HTTP server.

• Question 74:

  Refer to the exhibit. Which type of VPN implementation is displayed?

  

  A. IKEv2 reconnect
  B. IKEv1 cluster
  C. IKEv2 load balancer
  D. IKEv1 client
  E. IPsec high availability
  F. IKEv2 backup gateway
  C. IKEv2 load balancer

• Question 75:

  From the CLI od a cisco ASA 5520, which command shows specific information about current clientless and cisco Any connect SSL VPN users only?

  A. how crypto ikve1 sa detail
  B. show vpn-sessiondb remote
  C. show vpn-sessiondb
  D. show von-sessiondb detail
  D. show von-sessiondb detail

• Question 76:

  Which option is an example of an asymmetric algorithm?

  A. 3DES
  B. IDEA
  C. AES
  D. RSA
  D. RSA

• Question 77:

  Which two statements are true when designing a SSL VPN solution using Cisco AnyConnect? (Choose two.)

  A. The VPN server must have a self-signed certificate.
  B. A SSL group pre-shared key must be configured on the server.
  C. Server side certificate is optional if using AAA for client authentication.
  D. The VPN IP address pool can overlap with the rest of the LAN networks.
  E. DTLS can be enabled for better performance.
  D. The VPN IP address pool can overlap with the rest of the LAN networks.
  E. DTLS can be enabled for better performance.

• Question 78:

  

  

  If the IKEv2 tunnel were to establish successfully, which encryption algorithm would be used to encrypt traffic?

  A. DES
  B. 3DES
  C. AES
  D. AES192
  E. AES256
  E. AES256

• Question 79:

  Which two statements comparing ECC and RSA are true? (Choose two.)

  A. Key generation in FCC is slower and more CPU intensive than RSA.
  B. ECC can have the same security as RSA but with a shorter key size
  C. Key generation in ECC is faster and less CPU intensive than RSA.
  D. ECC cannot have the same security as RSA. even with an increased key size.
  E. ECC lags m performance when compared with RSA.
  B. ECC can have the same security as RSA but with a shorter key size
  C. Key generation in ECC is faster and less CPU intensive than RSA.

• Question 80:

  Refer to the exhibit. The "level_2" digital certificate was installed on a laptop.

  

  What can cause an "invalid not active" status message?

  A. On first use, a CA server-supplied passphrase is entered to validate the certificate.
  B. A "newly installed" digital certificate does not become active until it is validated by the peer device upon its first usage.
  C. The user has not clicked the Verify button within the Cisco VPN Client.
  D. The CA server and laptop PC clocks are out of sync.
  D. The CA server and laptop PC clocks are out of sync.