[Free] 2019(Nov) EnsurePass Cisco 300-209 Dumps with VCE and PDF 1-10

Get Full Version of the Exam
http://www.EnsurePass.com/300-209.html

Question No.1

Refer to the exhibit. The IKEv2 site-to-site VPN tunnel between two routers is down. Based on the debug output, which type of mismatch might be the problem?

image

  1. PSK

  2. crypto policy

  3. peer identity

  4. transform set

Correct Answer: C

Question No.2

Which command identifies an AnyConnect profile that was uploaded to the router flash?

  1. crypto vpn anyconnect profile SSL_profile flash:simos-profile.xml

  2. svc import profile SSL_profile flash:simos-profile.xml

  3. anyconnect profile SSL_profile flash:simos-profile.xml

  4. webvpn import profile SSL_profile flash:simos-profile.xml

Correct Answer: A

Question No.3

A user is trying to connect to a Cisco IOS device using clientless SSL VPN and cannot establish the connection. Which three commands can be used for troubleshooting of the AAA subsystem? (Choose three.)

  1. debug aaa authentication

  2. debug radius

  3. debug vpn authorization error

  4. debug ssl openssl errors

  5. debug webvpn aaa

  6. debug ssl error

Correct Answer: ABD

Question No.4

Refer to the exhibit. Which VPN solution does this configuration represent?

image

  1. Cisco AnyConnect

  2. IPsec

  3. L2TP

  4. SSL VPN

Correct Answer: B

Question No.5

Which is used by GETVPN, FlexVPN and DMVPN?

  1. NHRP

  2. MPLS

  3. GRE

  4. ESP

Correct Answer: D

Question No.6

Which three parameters are specified in the isakmp (IKEv1) policy? (Choose three.)

  1. the hashing algorithm

  2. the authentication method

  3. the lifetime

  4. the session key

  5. the transform-set

  6. the peer

Correct Answer: ABC

Question No.7

Which statement about the hub in a DMVPN configuration with iBGP is true?

  1. It must be a route reflector client.

  2. It must redistribute EIGRP from the spokes.

  3. It must be in a different AS.

  4. It must be a route reflector.

Correct Answer: D

Question No.8

Refer to the exhibit. Which technology does this configuration demonstrate?

image

  1. AnyConnect SSL over IPv4 IPv6

  2. AnyConnect FlexVPN over IPv4 IPv6

  3. AnyConnect FlexVPN IPv6 over IPv4

  4. AnyConnect SSL IPv6 over IPv4

Correct Answer: A

Question No.9

Refer to the exhibit. While troubleshooting on a remote-access VPN application, a new NOC engineer received the message that is shown. What is the most likely cause of the problem?

image

  1. The IP address that is assigned to the PC of the VPN user is not within the range of addresses that are assigned to the SVC connection.

  2. The IP address that is assigned to the PC of the VPN user is in use. The remote user needs to select a different host address within the range.

  3. The IP address that is assigned to the PC of the VPN user is in the wrong subnet. The remote user needs to select a different host number within the correct subnet.

  4. The IP address pool for contractors was not applied to their connection profile.

Correct Answer: D

Question No.10

Which protocol can be used for better throughput performance when using Cisco AnyConnect VPN?

  1. TLSv1

  2. TLSv1.1

  3. TLSv1.2

  4. DTLSv1

Correct Answer: D

Get Full Version of the Exam
300-209 Dumps
300-209 VCE and PDF

tagged with , , , , , ,