Cisco 300-209 Online Practice Questions and Exam Preparation

Cisco 300-209 Online Questions & Answers

• Question 81:

  Which access lists are used in a typical IPsec VPN configuration?

  A. ACL to NAT traffic across the VPN tunnel
  B. ACL to define policy based routing
  C. ACL to define what traffic to exempt from NAT
  D. ACL for routing neighbors across the tunnel
  C. ACL to define what traffic to exempt from NAT

• Question 82:

  Which VPN type can be used to provide secure remote access from public internet cafes and airport kiosks?

  A. site-to-site
  B. business-to-business
  C. Clientless SSL
  D. DMVPN
  C. Clientless SSL

• Question 83:

  An engineer is configuring an IPsec VPN with IKEv2.

  Which three components are part of the IKEv2 proposal for this implementation? (Choos three.)

  A. key ring
  B. DH group
  C. integrity
  D. tunnel name
  E. encryption
  B. DH group
  C. integrity
  E. encryption

• Question 84:

  In DMVPN phase 2, which two EIGRP features need to be disabled on the hub to allow spoke-to- spoke communication? (Choose two.)

  A. autosummary
  B. split horizon
  C. metric calculation using bandwidth
  D. EIGRP address family
  E. next-hop-self
  F. default administrative distance
  B. split horizon
  E. next-hop-self

• Question 85:

  What must be enabled in the web browser of the client computer to support Clientless SSL VPN?

  A. cookies
  B. ActiveX
  C. Silverlight
  D. popups
  A. cookies

• Question 86:

  Which option is a possible solution if you cannot access a URL through clientless SSL VPN with Internet Explorer, while other browsers work fine?

  A. Verify the trusted zone and cookies settings in your browser.
  B. Make sure that you specified the URL correctly.
  C. Try the URL from another operating system.
  D. Move to the IPsec client.
  A. Verify the trusted zone and cookies settings in your browser.

• Question 87:

  Which configuration is used to build a tunnel between a Cisco ASA and ISR?

  A. crypto map
  B. DMVPN
  C. GET VPN
  D. GRE with IPsec
  E. GRE without IPsec
  A. crypto map

• Question 88:

  In FlexVPN, what command can an administrator use to create a virtual template interface that can be configured and applied dynamically to create virtual access interfaces?

  A. interface virtual-template number type template
  B. interface virtual-template number type tunnel
  C. interface template number type virtual
  D. interface tunnel-template number
  B. interface virtual-template number type tunnel

• Question 89:

  An engineer is troubleshooting an IPSec site-to-site tunnel and verifies that the tunnel status is MM_WAIT_MSG6. what can be determined this message ?

  A. The encryption policy has not been confirmed by the initiator
  B. The encryption policy has not been confirmed by the responder
  C. The PSK has not been confirmed by the initiator
  D. The PSK has not been confirmed by the responder
  C. The PSK has not been confirmed by the initiator

• Question 90:

  In the Diffie-Hellman protocol, which type of key is the shared secret?

  A. a symmetric key
  B. an asymmetric key
  C. a decryption key
  D. an encryption key
  A. a symmetric key