Cisco Implementing Cisco Secure Mobility Solutions - 300-209 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

An engineer must set up DMVPN Phase 2 with EIGRP to ensure spoke to spoke communication. Which two EIGRP features must be disabled?

A. stub routing B. auto- summary C. route redistribution D. next hop-self E. split- horizon

Discussion 0

Correct Answer: D,E Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

While attempting to establish a site-to-site VPN, the engineer notices that phase 1 of the VPN tunnel fails. The engineer wants to run a capture to confirm that the outside interface is receiving phase1 information from the third party peer address. Which command must be run on the ASA to verify this information?

A. Capture capin interface outside match udp any eq 500 any eq 500 B. Capture capin interface outside match ipsec any any C. Capture capin interface outside match ah any any D. Capture capin interface outside match udp any eq 123 any eq 123 E. Capture capin interface outside match gre any any

Discussion 0

Correct Answer: A Vote an answer

Question 3

A network engineer testing a clientless VPN connection on a local workstation sees the "Clientless (browser) SSL VPN access is not allowed." message in the web browser. Which command remediates the problem?

A. auto-signon allow uri cifs://X.X.X.X/* auth-type all B. svc dtls enable C. vpn-tunnel-protocol ssl-clientless D. deny-message none

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

Dynamic access policies can support serveral posture assessments methods to collect endpoint security attributes.From which operating system does an endpoint collect information?

A. Cisco Secure Desktop B. Host Scan C. Cisco NAC D. Advanced Endpoint Assessment

Discussion 0

Correct Answer: A Vote an answer

Question 5

Why must a network engineer avoid usage of the default X509 certificate when implementing clientless SSLVPN on an ASA?

A. The default X 509 certificate is not supported for SSLVPN. B. The certificate must be managed by the local CA. C. The certificate is regenerated at each reboot. D. The Certificate is too weak to provide adequate security.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

Using the Next Generation Encryption technologies, which is the minimum acceptable encryption level to protect sensitive information?

A. AES 512 bits B. AES 128 bits C. AES 92 bits D. AES 256 bits

Discussion 0

Correct Answer: D Vote an answer

Question 7

Refer to the exhibit.

Which statement about this output is true?

A. The tunnel is not functional because NAT-T is not configured B. Identity between endpoints is verified using a certificate authority C. This router has sent the first packet to establish the FlexVPN tunnel D. The remote device encrypts IKEv2 packets using key "282FE0B3B5C99A2B"

Discussion 0

Correct Answer: B Vote an answer

Question 8

Which two options are benefits of AES compared to 3DES? (Choose two )

A. shorter encryption keys B. longer encryption block length C. switches encryption keys every 32 GB of data transfer D. repeating encryption keys E. faster encryption

Discussion 0

Correct Answer: B,E Vote an answer

Question 9

Which option is a benefit of ECC as compared to public key cryptography?

A. increases speed by using a small key B. improves security by using many keys C. improves security by using a large key size D. increases speed by using many algorithm methods

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).