This page was exported from Lead2pass New Updated Exam Questions [ https://www.getfreevce.com ]

Export date:Sun Dec 22 13:44:22 2024 / +0000 GMT

___________________________________________________


Title: [PDF&amp;VCE] Latest 300-209 Dumps PDF Free Download In Lead2pass (1-20)

---------------------------------------------------


2016 October Cisco Official New Released 300-209 Dumps in Lead2pass.com!  100% Free Download! 100% Pass Guaranteed!  Lead2pass provides 100% pass 300-209 exam questions and answers for your Cisco 300-209 exam. We provide Cisco 300-209 exam questions from Lead2pass dumps and answers for the training of 300-209 practice test.  Following questions and answers are all new published by Cisco Official Exam Center: http://www.lead2pass.com/300-209.html  QUESTION 1 Which two IKEv1 policy options must match on each peer when you configure an IPsec site-to-site VPN? (Choose two.) A.&nbsp;&nbsp;&nbsp; priority number B.&nbsp;&nbsp;&nbsp; hash algorithm C.&nbsp;&nbsp;&nbsp; encryption algorithm D.&nbsp;&nbsp;&nbsp; session lifetime E.&nbsp;&nbsp;&nbsp; PRF algorithmAnswer: BC QUESTION 2 Which two parameters are configured within an IKEv2 proposal on an IOS router? (Choose two.) A.&nbsp;&nbsp;&nbsp; authentication B.&nbsp;&nbsp;&nbsp; encryption C.&nbsp;&nbsp;&nbsp; integrity D.&nbsp;&nbsp;&nbsp; lifetime Answer: BC QUESTION 3 In a spoke-to-spoke DMVPN topology, which type of interface does a branch router require? A.&nbsp;&nbsp;&nbsp; virtual tunnel interface B.&nbsp;&nbsp;&nbsp; multipoint GRE interface C.&nbsp;&nbsp;&nbsp; point-to-point GRE interface D.&nbsp;&nbsp;&nbsp; loopback interface Answer: B QUESTION 4 To change the title panel on the logon page of the Cisco IOS WebVPN portal, which file must you configure? A.&nbsp;&nbsp;&nbsp; Cisco IOS WebVPN customization template B.&nbsp;&nbsp;&nbsp; Cisco IOS WebVPN customization general C.&nbsp;&nbsp;&nbsp; web-access-hlp.inc D.&nbsp;&nbsp;&nbsp; app-access-hlp.inc Answer: A QUESTION 5 Which three plugins are available for clientless SSL VPN? (Choose three.) A.&nbsp;&nbsp;&nbsp; CIFS B.&nbsp;&nbsp;&nbsp; RDP2 C.&nbsp;&nbsp;&nbsp; SSH D.&nbsp;&nbsp;&nbsp; VNC E.&nbsp;&nbsp;&nbsp; SQLNET F.&nbsp;&nbsp;&nbsp; ICMP Answer: BCD QUESTION 6 Which command simplifies the task of converting an SSL VPN to an IKEv2 VPN on a Cisco ASA appliance that has an invalid IKEv2 configuration? A.&nbsp;&nbsp;&nbsp; migrate remote-access ssl overwrite B.&nbsp;&nbsp;&nbsp; migrate remote-access ikev2 C.&nbsp;&nbsp;&nbsp; migrate l2l D.&nbsp;&nbsp;&nbsp; migrate remote-access ssl Answer: A QUESTION 7 Which statement describes a prerequisite for single-sign-on Netegrity Cookie Support in an IOC SSL VPN? A.&nbsp;&nbsp;&nbsp; The Cisco AnyConnect Secure Mobility Client must be installed in flash. B.&nbsp;&nbsp;&nbsp; A SiteMinder plug-in must be installed on the Cisco SSL VPN gateway. C.&nbsp;&nbsp;&nbsp; A Cisco plug-in must be installed on a SiteMinder server. D.&nbsp;&nbsp;&nbsp; The Cisco Secure Desktop software package must be installed in flash. Answer: C QUESTION 8 Which two statements describe effects of the DoNothing option within the untrusted network policy on a Cisco AnyConnect profile? (Choose two.) A.&nbsp;&nbsp;&nbsp; The client initiates a VPN connection upon detection of an untrusted network. B.&nbsp;&nbsp;&nbsp; The client initiates a VPN connection upon detection of a trusted network. C.&nbsp;&nbsp;&nbsp; The always-on feature is enabled. D.&nbsp;&nbsp;&nbsp; The always-on feature is disabled. E.&nbsp;&nbsp;&nbsp; The client does not automatically initiate any VPN connection. Answer: AD QUESTION 9 Which command enables IOS SSL VPN Smart Tunnel support for PuTTY? A.&nbsp;&nbsp;&nbsp; appl ssh putty.exe win B.&nbsp;&nbsp;&nbsp; appl ssh putty.exe windows C.&nbsp;&nbsp;&nbsp; appl ssh putty D.&nbsp;&nbsp;&nbsp; appl ssh putty.exe Answer: B QUESTION 10 Which three remote access VPN methods in an ASA appliance provide support for Cisco Secure Desktop? (Choose three.) A.&nbsp;&nbsp;&nbsp; IKEv1 B.&nbsp;&nbsp;&nbsp; IKEv2 C.&nbsp;&nbsp;&nbsp; SSL client D.&nbsp;&nbsp;&nbsp; SSL clientless E.&nbsp;&nbsp;&nbsp; ESP F.&nbsp;&nbsp;&nbsp; L2TP Answer: BCD QUESTION 11 A user is unable to establish an AnyConnect VPN connection to an ASA. When using the Real-Time Log viewer within ASDM to troubleshoot the issue, which two filter options would the administrator choose to show only syslog messages relevant to the VPN connection? (Choose two.) A.&nbsp;&nbsp;&nbsp; Client's public IP address B.&nbsp;&nbsp;&nbsp; Client's operating system C.&nbsp;&nbsp;&nbsp; Client's default gateway IP address D.&nbsp;&nbsp;&nbsp; Client's username E.&nbsp;&nbsp;&nbsp; ASA's public IP address Answer: AD QUESTION 12 Which Cisco ASDM option configures forwarding syslog messages to email? A.&nbsp;&nbsp;&nbsp; Configuration &gt; Device Management &gt; Logging &gt; E-Mail Setup B.&nbsp;&nbsp;&nbsp; Configuration &gt; Device Management &gt; E-Mail Setup &gt; Logging Enable C.&nbsp;&nbsp;&nbsp; Select the syslogs to email, click Edit, and select the Forward Messages option. D.&nbsp;&nbsp;&nbsp; Select the syslogs to email, click Settings, and specify the Destination Email Address option. Answer: A QUESTION 13 Which Cisco ASDM option configures WebVPN access on a Cisco ASA? A.&nbsp;&nbsp;&nbsp; Configuration &gt; WebVPN &gt; WebVPN Access B.&nbsp;&nbsp;&nbsp; Configuration &gt; Remote Access VPN &gt; Clientless SSL VPN Access C.&nbsp;&nbsp;&nbsp; Configuration &gt; WebVPN &gt; WebVPN Config D.&nbsp;&nbsp;&nbsp; Configuration &gt; VPN &gt; WebVPN Access Answer: B QUESTION 14 A user with IP address 10.10.10.10 is unable to access a HTTP website at IP address 209.165.200.225 through a Cisco ASA. Which two features and commands will help troubleshoot the issue? (Choose two.) A.&nbsp;&nbsp;&nbsp; Capture user traffic using command capture capin interface inside match ip host 10.10.10.10 any B.&nbsp;&nbsp;&nbsp; After verifying that user traffic reaches the firewall using syslogs or captures, use packet tracer command packet-tracer input inside tcp 10.10.10.10 1234 209.165.200.225 80 C.&nbsp;&nbsp;&nbsp; Enable logging at level 1 and check the syslogs using commands logging enable, logging buffered 1 and show logging | include 10.10.10.10 D.&nbsp;&nbsp;&nbsp; Check if an access-list on the firewall is blocking the user by using command show running-config access-list | include 10.10.10.10 E.&nbsp;&nbsp;&nbsp;&nbsp; Use packet tracer command packet-tracer input inside udp 0.10.10.10 1234192.168.1.3 161 to see what the firewall is doing with the user's traffic Answer: AB QUESTION 15 A Cisco router may have a fan issue that could increase its temperature and trigger a failure. What troubleshooting steps would verify the issue without causing additional risks? A.&nbsp;&nbsp;&nbsp; Configure logging using commands "logging on", "logging buffered 4", and check for fan failure logs using "show logging" B.&nbsp;&nbsp;&nbsp; Configure logging using commands "logging on", "logging buffered 6", and check for fan failure logs using "show logging" C.&nbsp;&nbsp;&nbsp; Configure logging using commands "logging on", "logging discriminator msglog1 console 7", and check for fan failure logs using "show logging" D.&nbsp;&nbsp;&nbsp; Configure logging using commands "logging host 10.11.10.11", "logging trap 2", and check for fan failure logs at the syslog server 10.11.10.11 Answer: A QUESTION 16 Which of these are the two types of keys used when implementing GET VPN? (Choose two) A.&nbsp;&nbsp;&nbsp; key encryption B.&nbsp;&nbsp;&nbsp; group encryption C.&nbsp;&nbsp;&nbsp; pre-shared key D.&nbsp;&nbsp;&nbsp; public key E.&nbsp;&nbsp;&nbsp; private key F.&nbsp;&nbsp;&nbsp; traffic encryption key Answer: AF QUESTION 17 A private wan connection is suspected of intermittently corrupting data. Which technology can a network administrator use to detect and drop the altered data traffic? A.&nbsp;&nbsp;&nbsp; AES-128 B.&nbsp;&nbsp;&nbsp; RSA Certificates C.&nbsp;&nbsp;&nbsp; SHA2-HMAC D.&nbsp;&nbsp;&nbsp; 3DES E.&nbsp;&nbsp;&nbsp; Diffie-Helman Key Generation Answer: C QUESTION 18 A company needs to provide secure access to its remote workforce. The end users use public kiosk computers and a wide range of devices. They will be accessing only an internal web application. Which VPN solution satisfies these requirements? A.&nbsp;&nbsp;&nbsp; Clientless SSLVPN B.&nbsp;&nbsp;&nbsp; AnyConnect Client using SSLVPN C.&nbsp;&nbsp;&nbsp; AnyConnect Client using IKEv2 D.&nbsp;&nbsp;&nbsp; FlexVPN Client E.&nbsp;&nbsp;&nbsp; Windows built-in PPTP client Answer: A QUESTION 19 A network administrator is configuring AES encryption for the ISAKMP policy on an IOS router. Which two configurations are valid? (Choose two.) A.&nbsp;&nbsp;&nbsp; crypto isakmp policy 10 encryption aes 254 B.&nbsp;&nbsp;&nbsp; crypto isakmp policy 10 encryption aes 192 C.&nbsp;&nbsp;&nbsp; crypto isakmp policy 10 encryption aes 256 D.&nbsp;&nbsp;&nbsp; crypto isakmp policy 10 encryption aes 196 E.&nbsp;&nbsp;&nbsp; crypto isakmp policy 10 encryption aes 198 F.&nbsp;&nbsp;&nbsp; crypto isakmp policy 10 encryption aes 64 Answer: BC QUESTION 20 Which two qualify as Next Generation Encryption integrity algorithms? (Choose two.) A.&nbsp;&nbsp;&nbsp; SHA-512 B.&nbsp;&nbsp;&nbsp; SHA-256 C.&nbsp;&nbsp;&nbsp; SHA-192 D.&nbsp;&nbsp;&nbsp; SHA-380 E.&nbsp;&nbsp;&nbsp; SHA-192 F.&nbsp;&nbsp;&nbsp; SHA-196 Answer: AB  Lead2pass is the leader in 300-209 certification test questions with training materials for Cisco 300-209 exam dumps. Lead2pass Cisco training tools are constantly being revised and updated. We 100% guarantee Cisco 300-209 exam questions with quality and reliability which will help you pass Cisco 300-209 exam.  300-209 new questions on Google Drive: https://drive.google.com/open?id=0B3Syig5i8gpDODI1TDlUT1lBV00  2016 Cisco 300-209 exam dumps (All 237 Q&amp;As) from Lead2pass:  http://www.lead2pass.com/300-209.html [100% Exam Pass Guaranteed]

---------------------------------------------------


Images: 

---------------------------------------------------




---------------------------------------------------


Post date: 2016-10-18 02:16:13

Post date GMT: 2016-10-18 02:16:13

Post modified date: 2016-10-18 02:16:13

Post modified date GMT: 2016-10-18 02:16:13



____________________________________________________________________________________________


Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com