aiotestking uk

300-209 Exam Questions - Online Test


300-209 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Q1. Refer to the exhibit. 

The customer needs to launch AnyConnect in the RDP machine. Which configuration is correct? 

A. crypto vpn anyconnect profile test flash:RDP.xml 

policy group default 

svc profile test 

B. crypto vpn anyconnect profile test flash:RDP.xml 

webvpn context GW_1 

browser-attribute import flash:/swj.xml 

C. crypto vpn anyconnect profile test flash:RDP.xml 

policy group default 

svc profile flash:RDP.xml 

D. crypto vpn anyconnect profile test flash:RDP.xml 

webvpn context GW_1 

browser-attribute import test 

Answer:

Q2. Which two parameters are configured within an IKEv2 proposal on an IOS router? (Choose two.) 

A. authentication 

B. encryption 

C. integrity 

D. lifetime 

Answer: B,C 

Q3. Remote users want to access internal servers behind an ASA using Microsoft terminal services. Which option outlines the steps required to allow users access via the ASA clientless VPN portal? 

A. 1. Configure a static pat rule for TCP port 3389 

2. Configure an inbound access-list to allow traffic from remote users to the servers 

3. Assign this access-list rule to the group policy 

B. 1. Configure a bookmark of the type http:// server-IP :3389 

2. Enable Smart tunnel on this bookmark 

3. Assign the bookmark to the desired group policy 

C. 1. Configure a Smart Tunnel application list 

2. Add the rdp.exe process to this list 

3. Assign the Smart Tunnel application list to the desired group policy 

D. 1. Upload an RDP plugin to the ASA 

2. Configure a bookmark of the type rdp:// server-IP 

3. Assign the bookmark list to the desired group policy 

Answer:

Q4. The Cisco AnyConnect client is unable to download an updated user profile from the ASA headend using IKEv2. What is the most likely cause of this problem? 

A. User profile updates are not allowed with IKEv2. 

B. IKEv2 is not enabled on the group policy. 

C. A new profile must be created so that the adaptive security appliance can push it to the client on the next connection attempt. 

D. Client Services is not enabled on the adaptive security appliance. 

Answer:

Q5. Which three parameters must match on all routers in a DMVPN Phase 3 cloud? (Choose three.) 

A. NHRP network ID 

B. GRE tunnel key 

C. NHRP authentication string 

D. tunnel VRF 

E. EIGRP process name 

F. EIGRP split-horizon setting 

Answer: A,B,C 

Q6. Refer to the exhibit. 

What is the problem with the IKEv2 site-to-site VPN tunnel? 

A. incorrect PSK 

B. crypto access list mismatch 

C. incorrect tunnel group 

D. crypto policy mismatch 

E. incorrect certificate 

Answer:

Q7. Which three remote access VPN methods in an ASA appliance provide support for Cisco Secure Desktop? (Choose three.) 

A. IKEv1 

B. IKEv2 

C. SSL client 

D. SSL clientless 

E. ESP 

F. L2TP 

Answer: B,C,D 

Q8. Which feature enforces the corporate policy for Internet access to Cisco AnyConnect VPN users? 

A. Trusted Network Detection 

B. Datagram Transport Layer Security 

C. Cisco AnyConnect Customization 

D. banner message 

Answer:

Q9. Which command enables the router to form EIGRP neighbor adjacencies with peers using a different subnet than the ingress interface? 

A. ip unnumbered interface 

B. eigrp router-id 

C. passive-interface interface name 

D. ip split-horizon eigrp as number 

Answer:

Q10. Which application does the Application Access feature of Clientless VPN support? 

A. TFTP 

B. VoIP 

C. Telnet 

D. active FTP 

Answer: