Get real exam questions for 300-209 Implementing Cisco Secure Mobility Solutions (SIMOS). 100% Free.
Q1. CORRECT TEXT View AnswerAnswer: Here are the steps as below: Step 1: configure key ring crypto ikev2 keyring mykeys peer SiteB.cisco.com address 209.161.201.1 pre-shared-key local $iteA pre-shared key remote $iteB Step 2: Configure IKEv2 profile Crypto ikev2 profile default identity local fqdn SiteA.cisco.com Match identity remote fqdn SiteB.cisco.com Authentication local pre-sha
Q1. Refer to the exhibit. Which two characteristics of the VPN implementation are evident? (Choose two.) A. dual DMVPN cloud setup with dual hub B. DMVPN Phase 3 implementation C. single DMVPN cloud setup with dual hub D. DMVPN Phase 1 implementation E. quad DMVPN cloud with quadra hub F. DMVPN Phase 2 implementation View AnswerAnswer: B,C Q2. Which cryptographic algorithms are a part
Q1. In the Diffie-Hellman protocol, which type of key is the shared secret? A. a symmetric key B. an asymmetric key C. a decryption key D. an encryption key View AnswerAnswer: A Q2. The Cisco AnyConnect client is unable to download an updated user profile from the ASA headend using IKEv2. What is the most likely cause of this problem? A. User profile updates are not allowed with IKEv2.
Q1. Which Cisco adaptive security appliance command can be used to view the count of all active VPN sessions? A. show vpn-sessiondb summary B. show crypto ikev1 sa C. show vpn-sessiondb ratio encryption D. show iskamp sa detail E. show crypto protocol statistics all View AnswerAnswer: A Q2. What are two variables for configuring clientless SSL VPN single sign-on? (Choose two.) A. CSCO_W
Q1. Which option describes the purpose of the command show derived-config interface virtual-access 1? A. It verifies that the virtual access interface is cloned correctly with per-user attributes. B. It verifies that the virtual template created the tunnel interface. C. It verifies that the virtual access interface is of type Ethernet. D. It verifies that the virtual access interface is used
Q1. What does NHRP stand for? A. Next Hop Resolution Protocol B. Next Hop Registration Protocol C. Next Hub Routing Protocol D. Next Hop Routing Protocol View AnswerAnswer: A Q2. Which technology is FlexVPN based on? A. OER B. VRF C. IKEv2 D. an RSA nonce View AnswerAnswer: C Q3. Which IKEv2 feature minimizes the configuration of a FlexVPN on Cisco IOS devices? A. IKEv2 Suite-B B
Q1. What is the Cisco recommended TCP maximum segment on a DMVPN tunnel interface when the MTU is set to 1400 bytes? A. 1160 bytes B. 1260 bytes C. 1360 bytes D. 1240 bytes View AnswerAnswer: C Q2. Which three configurations are prerequisites for stateful failover for IPsec? (Choose three.) A. Only the IKE configuration that is set up on the active device must be duplicated on the standb
Q1. Which Cisco ASDM option configures forwarding syslog messages to email? A. Configuration > Device Management > Logging > E-Mail Setup B. Configuration > Device Management > E-Mail Setup > Logging Enable C. Select the syslogs to email, click Edit, and select the Forward Messages option. D. Select the syslogs to email, click Settings, and specify the Destination Email Addr
Q1. Which technology can provide high availability for an SSL VPN? A. DMVPN B. a multiple-tunnel configuration C. a Cisco ASA pair in active/passive failover configuration D. certificate to tunnel group maps View AnswerAnswer: C Q2. When an IPsec SVTI is configured, which technology processes traffic forwarding for encryption? A. ACL B. IP routing C. RRI D. front door VPN routing and
Q1. You have deployed new Cisco AnyConnect start before logon modules and set the configuration to download modules before logon, but all client connections continue to use the previous version of the module. Which action must you take to correct the problem? A. Configure start before logon in the client profile. B. Configure a group policy to prompt the user to download the updated module. C.
Q1. Refer to the exhibit. Which type of VPN is being configured, based on the partial configuration snippet? A. DMVPN with dual hub B. GET VPN with dual group member C. FlexVPN backup gateway D. GET VPN with COOP key server E. FlexVPN load balancer View AnswerAnswer: D Q2. A user is unable to establish an AnyConnect VPN connection to an ASA. When using the Real-Time Log viewer within AS
Q1. Which algorithm is replaced by elliptic curve cryptography in Cisco NGE? A. 3DES B. AES C. DES D. RSA View AnswerAnswer: D Q2. Which algorithm provides both encryption and authentication for data plane communication? A. SHA-96 B. SHA-384 C. 3DES D. AES-256 E. AES-GCM F. RC4 View AnswerAnswer: E Q3. Which two GDOI encryption keys are used within a GET VPN network? (Choose two.
Q1. Refer to the exhibit. The IKEv2 site-to-site VPN tunnel between two routers is down. Based on the debug output, which type of mismatch might be the problem? A. PSK B. crypto policy C. peer identity D. transform set View AnswerAnswer: C Q2. Refer to the exhibit. What technology does the given configuration demonstrate? A. Keyring used to encrypt IPSec traffic B. FlexVPN with IPV6
Q1. Scenario: You are the senior network security administrator for your organization. Recently and junior engineer configured a site-to-site IPsec VPN connection between your headquarters Cisco ASA and a remote branch office. You are now tasked with verifying the IKEvl IPsec installation to ensure it was properly configured according to designated parameters. Using the CLI on both the Cisco AS
Q1. Which protocols does the Cisco AnyConnect client use to build multiple connections to the security appliance? A. TLS and DTLS B. IKEv1 C. L2TP over IPsec D. SSH over TCP View AnswerAnswer: A Q2. Which command clears all crypto configuration from a Cisco Adaptive Security Appliance? A. clear configure crypto B. clear configure crypto ipsec C. clear crypto map D. clear crypto ikev2
Q1. When troubleshooting established clientless SSL VPN issues, which three steps should be taken? (Choose three.) A. Clear the browser history. B. Clear the browser and Java cache. C. Collect the information from the computer event log. D. Enable and use HTML capture tools. E. Gather crypto debugs on the adaptive security appliance. F. Use Wireshark to capture network traffic. View Answer
Q1. Refer to the exhibit. The customer needs to launch AnyConnect in the RDP machine. Which configuration is correct? A. crypto vpn anyconnect profile test flash:RDP.xml policy group default svc profile test B. crypto vpn anyconnect profile test flash:RDP.xml webvpn context GW_1 browser-attribute import flash:/swj.xml C. crypto vpn anyconnect profile test flash:RDP.xml policy group defau
Q1. Which functionality is provided by L2TPv3 over FlexVPN? A. the extension of a Layer 2 domain across the FlexVPN B. the extension of a Layer 3 domain across the FlexVPN C. secure communication between servers on the FlexVPN D. a secure backdoor for remote access users through the FlexVPN View AnswerAnswer: A Q2. Which PKI enrollment method allows the user to separate authentication and