[Free] 2017(Apr) Ensurepass Braindumps Cisco 300-209 Latest Dumps 1-10

Ensurepass
2017 April Cisco Official New Released 300-209 Q&As
100% Free Download! 100% Pass Guaranteed!
http://www.ensurepass.com/300-209.html

Implementing Cisco Secure Mobility Solutions (SIMOS)

QUESTION 1

Refer to the exhibit. The IKEv2 site-to-site VPN tunnel between two routers is down. Based on the debug output, which type of mismatch might be the problem?

 

clip_image002

 

A.

PSK

B.

crypto policy

C.

peer identity

D.

transform set

 

Correct Answer: C

 

 

QUESTION 2

Which command identifies an AnyConnect profile that was uploaded to the router flash?

 

A.

crypto vpn anyconnect profile SSL_profile flash:simos-profile.xml

B.

svc import profile SSL_profile flash:simos-profile.xml

C.

anyconnect profile SSL_profile flash:simos-profile.xml

D.

webvpn import profile SSL_profile flash:simos-profile.xml

 

Correct Answer: A

 

 

QUESTION 3

A user is trying to connect to a Cisco IOS device using clientless SSL VPN and cannot establish the connection. Which three commands can be used for troubleshooting of the AAA subsystem? (Choose three.)

 

A.

debug aaa authentication

B.

debug radius

C.

debug vpn authorization error

D.

debug ssl openssl errors

E.

debug webvpn aaa

F.

debug ssl error

 

Correct Answer: ABD

 

 

QUESTION 4

Refer to the exhibit. Which VPN solution does this configuration represent?

 

clip_image003

 

A.

Cisco AnyConnect

B.

IPsec

C.

L2TP

D.

SSL VPN

 

Correct Answer: B

 

 

QUESTION 5

Which is used by GETVPN, FlexVPN and DMVPN?

 

A.

NHRP

B.

MPLS

C.

GRE

D.

ESP

 

Correct Answer: D

 

 

QUESTION 6

Which three parameters are specified in the isakmp (IKEv1) policy? (Choose three.)

 

A.

the hashing algorithm

B.

the authentication method

C.

the lifetime

D.

the session key

E.

the transform-set

F.

the peer

 

Correct Answer: ABC

 

 

QUESTION 7

Which statement about the hub in a DMVPN configuration with iBGP is true?

 

A.

It must be a route reflector client.

B.

It must redistribute EIGRP from the spokes.

C.

It must be in a different AS.

D.

It must be a route reflector.

 

Correct Answer: D

 

 

QUESTION 8

Refer to the exhibit. Which technology does this configuration demonstrate?

 

clip_image005

A.

AnyConnect SSL over IPv4+IPv6

B.

AnyConnect FlexVPN over IPv4+IPv6

C.

AnyConnect FlexVPN IPv6 over IPv4

D.

AnyConnect SSL IPv6 over IPv4

 

Correct Answer: A

 

 

QUESTION 9

Refer to the exhibit. While troubleshooting on a remote-access VPN application, a new NOC engineer received the message that is shown. What is the most likely cause of the problem?

 

clip_image007

 

A.

The IP address that is assigned to the PC of the VPN user is not within the range of addresses that are assigned to the SVC connection.

B.

The IP address that is assigned to the PC of the VPN user is in use. The remote user needs to select a different host address within the range.

C.

The IP address that is assigned to the PC of the VPN user is in the wrong subnet. The remote user needs to select a different host number within the correct subnet.

D.

The IP address pool for contractors was not applied to their connection profile.

 

Correct Answer: D

 

 

QUESTION 10

Which protocol can be used for better throughput performance when using Cisco AnyConnect VPN?

 

A.

TLSv1

B.

TLSv1.1

C.

TLSv1.2

D.

DTLSv1

 

Correct Answer: D

100% Free Download!
—Download Free Demo:300-209 Demo PDF
100% Pass Guaranteed!
Download 2017 Ensurepass 300-209 Full Exam PDF and VCE Q&As:267
—Get 10% off your purchase! Copy it:8GTC-8UIE-M1SC [2017.04.01-2017.04.30]

Ensurepass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF + VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 Ensurepass IT Certification PDF and VCE

Proudly powered by WordPress   Premium Style Theme by www.gopiplus.com