Download New Updated (Spring 2015) Cisco 300-209 Actual Tests 11-20

Ensurepass

 

QUESTION 11

What are the three primary components of a GET VPN network? (Choose three.)

 

A.

Group Domain of Interpretation protocol

B.

Simple Network Management Protocol

C.

server load balancer

D.

accounting server

E.

group member

F.

key server

Correct Answer: AEF

 

 

QUESTION 12

Which two IKEv1 policy options must match on each peer when you configure an IPsec site-to-site VPN? (Choose two.)

 

A.

priority number

B.

hash algorithm

C.

encryption algorithm

D.

session lifetime

E.

PRF algorithm

 

Correct Answer: BC

 

 

QUESTION 13

Which two parameters are configured within an IKEv2 proposal on an IOS router? (Choose two.)

 

A.

authentication

B.

encryption

C.

integrity

D.

lifetime

 

Correct Answer: BC

 

 

QUESTION 14

In a spoke-to-spoke DMVPN topology, which type of interface does a branch router require?

 

A.

Virtual tunnel interface

B.

Multipoint GRE interface

C.

Point-to-point GRE interface

D.

Loopback interface

 

Correct Answer: B

 

 

QUESTION 15

Refer to the exhibit. After the configuration is performed, which combination of devices can connect?

 

clip_image001

A.

a device with an identity type of IPv4 address of 209.165.200.225 or 209.165.202.155 or a certificate with subject name of “cisco.com”

B.

a device with an identity type of IPv4 address of both 209.165.200.225 and 209.165.202.155 or a certificate with subject name containing “cisco.com”

C.

a device with an identity type of IPv4 address of both 209.165.200.225 and 209.165.202.155 and a certificate with subject name containing “cisco.com”

D.

a device with an identity type of IPv4 address of 209.165.200.225 or 209.165.202.155 or a certificate with subject name containing “cisco.com”

 

Correct Answer: D

 

 

QUESTION 16

Which three settings are required for crypto map configuration? (Choose three.)

 

A.

match address

B.

set peer

C.

set transform-set

D.

set security-association lifetime

E.

set security-association level per-host

F.

set pfs

 

Correct Answer: ABC

 

 

QUESTION 17

A network is configured to allow clientless access to resources inside the network. Which feature must be enabled and configured to allow SSH applications to respond on the specified port 8889?

 

A.

auto applet download

B.

port forwarding

C.

web-type ACL

D.

H
TTP proxy

 

Correct Answer: B

 

 

QUESTION 18

Consider this scenario. When users attempt to connect via a Cisco AnyConnect VPN session, the certificate has changed and the connection fails. What is a possible cause of the connection failure?

 

A.

An invalid modulus was used to generate the initial key.

B.

The VPN is using an expired certificate.

C.

The Cisco ASA appliance was reloaded.

D.

The Trusted Root Store is configured incorrectly.

 

Correct Answer: C

 

 

 

 

 

QUESTION 19

In the Cisco ASDM interface, where do you enable the DTLS protocol setting?

 

A.

Configuration > Remote Access VPN > Network (Client) Access > Group Policies > Add or Edit > Add or Edit Internal Group Policy

B.

Configuration > Remote Access VPN > Network (Client) Access > AAA Setup > Local Users > Add or Edit

C.

Device Management > Users/AAA > User Accounts > Add or Edit > Add or Edit User Account > VPN Policy > SSL VPN Client

D.

Configuration > Remote Access VPN > Network (Client) Acc
ess > Group Policies > Add or Edit

 

Correct Answer: C

Explanation:

Reference:

http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect20/administrative/guide/admin/admin5.html

Shows where DTLS can be configured as:

Configuration > Remote Access VPN > Network (Client) Access > Group Policies > Add or Edit > Add or Edit Internal Group Policy > Advanced > SSL VPN Client

Configuration > Remote Access VPN > Network (Client) Access > AAA Setup > Local Users > Add or Edit > Add or Edit User Account > VPN Policy > SSL VPN Client

Device Management > Users/AAA > User Accounts > Add or Edit > Add or Edit User Account > VPN Policy > SSL VPN Client

 

 

QUESTION 20

What are two forms of SSL VPN? (Choose two.)

 

A.

port forwarding

B.

Full Tunnel Mode

C.

Cisco IOS WebVPN

D.

Cisco AnyConnect

 

Correct Answer: AB

 

Free VCE & PDF File for Cisco 300-209 Real Exam

Instant Access to Free VCE Files: CCNA | CCNP | CCIE …
Instant Access to Free PDF Files: CCNA | CCNP | CCIE …