Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home Cisco® 300-209

Cisco® 300-209 Exam Practice Questions (P. 2)

  • Full Access (314 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #11
What are the three primary components of a GET VPN network? (Choose three.)
  1. A
    Group Domain of Interpretation protocol
  2. B
    Simple Network Management Protocol
  3. C
    server load balancer
  4. D
    accounting server
  5. E
    group member
  6. F
    key server

Correct Answer:
AEF

Question #12
Which two IKEv1 policy options must match on each peer when you configure an IPsec site-to-site VPN? (Choose two.)
  1. A
    priority number
  2. B
    hash algorithm
  3. C
    encryption algorithm
  4. D
    session lifetime
  5. E
    PRF algorithm

Correct Answer:
BC

Question #13
Which two parameters are configured within an IKEv2 proposal on an IOS router? (Choose two.)
  1. A
    authentication
  2. B
    encryption
  3. C
    integrity
  4. D
    lifetime

Correct Answer:
BC

Question #14
In a spoke-to-spoke DMVPN topology, which type of interface does a branch router require?
  1. A
    Virtual tunnel interface
  2. B
    Multipoint GRE interface
  3. C
    Point-to-point GRE interface
  4. D
    Loopback interface

Correct Answer:
B

Question #15
Refer to the exhibit.

After the configuration is performed, which combination of devices can connect?
  1. A
    a device with an identity type of IPv4 address of 209.165.200.225 or 209.165.202.155 or a certificate with subject name of "cisco.com"
  2. B
    a device with an identity type of IPv4 address of both 209.165.200.225 and 209.165.202.155 or a certificate with subject name containing "cisco.com"
  3. C
    a device with an identity type of IPv4 address of both 209.165.200.225 and 209.165.202.155 and a certificate with subject name containing "cisco.com"
  4. D
    a device with an identity type of IPv4 address of 209.165.200.225 or 209.165.202.155 or a certificate with subject name containing "cisco.com"

Correct Answer:
D

Question #16
Which three settings are required for crypto map configuration? (Choose three.)
  1. A
    match address
  2. B
    set peer
  3. C
    set transform-set
  4. D
    set security-association lifetime
  5. E
    set security-association level per-host
  6. F
    set pfs

Correct Answer:
ABC

Question #17
A network is configured to allow clientless access to resources inside the network. Which feature must be enabled and configured to allow SSH applications to respond on the specified port 8889?
  1. A
    auto applet download
  2. B
    port forwarding
  3. C
    web-type ACL
  4. D
    HTTP proxy

Correct Answer:
B

Question #18
Consider this scenario. When users attempt to connect via a Cisco AnyConnect VPN session, the certificate has changed and the connection fails.
What is a possible cause of the connection failure?
  1. A
    An invalid modulus was used to generate the initial key.
  2. B
    The VPN is using an expired certificate.
  3. C
    The Cisco ASA appliance was reloaded.
  4. D
    The Trusted Root Store is configured incorrectly.

Correct Answer:
C

Question #19
In the Cisco ASDM interface, where do you enable the DTLS protocol setting?
  1. A
    Configuration > Remote Access VPN > Network (Client) Access > Group Policies > Add or Edit > Add or Edit Internal Group Policy
  2. B
    Configuration > Remote Access VPN > Network (Client) Access > AAA Setup > Local Users > Add or Edit
  3. C
    Device Management > Users/AAA > User Accounts > Add or Edit > Add or Edit User Account > VPN Policy > SSL VPN Client
  4. D
    Configuration > Remote Access VPN > Network (Client) Access > Group Policies > Add or Edit

Correct Answer:
D
Reference:
https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/asdm78/vpn/asdm-78-vpn-config/vpn-asdm-setup.html
Shows where DTLS can be configured as:
Configuration > Remote Access VPN > Network (Client) Access > Group Policies > Add or Edit > Add or Edit Internal Group Policy > Advanced > SSL VPN

Client -
Configuration > Remote Access VPN > Network (Client) Access > AAA Setup > Local Users > Add or Edit > Add or Edit User Account > VPN Policy > SSL VPN

Client -
Device Management > Users/AAA > User Accounts > Add or Edit > Add or Edit User Account > VPN Policy > SSL VPN Client

Question #20
What are two forms of SSL VPN? (Choose two.)
  1. A
    port forwarding
  2. B
    Full Tunnel Mode
  3. C
    Cisco IOS WebVPN
  4. D
    Cisco AnyConnect

Correct Answer:
AB
Reference: https://www.cisco.com/c/en/us/support/docs/security/ssl-vpn-client/70664-IOSthinclient.html

Previous Questions Next Questions

All Pages