[Free] 2018(July) Ensurepass Cisco 300-209 Dumps with VCE and PDF 51-60

Ensurepass.com : Ensure you pass the IT Exams
2018 July Cisco Official New Released 300-209
100% Free Download! 100% Pass Guaranteed!

Implementing Cisco Secure Mobility Solutions

Question No: 51

Which feature is enabled by the use of NHRP in a DMVPN network?

  1. host routing with Reverse Route Injection

  2. BGP multiaccess

  3. host to NBMA resolution

  4. EIGRP redistribution

Answer: C

Question No: 52

Which benefit of FlexVPN is not offered by DMVPN using IKEv1?

  1. Dynamic routing protocols can be configured.

  2. IKE implementation can install routes in routing table.

  3. GRE encapsulation allows for forwarding of non-IP traffic.

  4. NHRP authentication provides enhanced security.

Answer: B

Question No: 53

A company has decided to migrate an existing IKEv1 VPN tunnel to IKEv2. Which two are valid configuration constructs on a Cisco IOS router? (Choose two.)

  1. crypto ikev2 keyring keyring-name peer peer1

    address 209.165.201.1 255.255.255.255

    pre-shared-key local key1

    pre-shared-key remote key2

  2. crypto ikev2 transform-set transform-set-name esp-3des esp-md5-hmac

    esp-aes esp-sha-hmac

  3. crypto ikev2 map crypto-map-name

    set crypto ikev2 tunnel-group tunnel-group-name set crypto ikev2 transform-set transform-set-name

  4. crypto ikev2 tunnel-group tunnel-group-name match identity remote address 209.165.201.1 authentication local pre-share

    authentication remote pre-share

  5. crypto ikev2 profile profile-name

match identity remote address 209.165.201.1 authentication local pre-share

authentication remote pre-share

Answer: A,E

Question No: 54

Refer to the exhibit.

Ensurepass 2018 PDF and VCE

An administrator had the above configuration working with SSL protocol, but as soon as the administrator specified IPsec as the primary protocol, the Cisco AnyConnect client was not

able to connect. What is the problem?

  1. IPsec will not work in conjunction with a group URL.

  2. The Cisco AnyConnect implementation does not allow the two group URLs to be the same. SSL does allow this.

  3. If you specify the primary protocol as IPsec, the User Group must be the exact name of the connection profile (tunnel group).

  4. A new XML profile should be created instead of modifying the existing profile, so that the clients force the update.

Answer: C

Question No: 55

Which command can be used to troubleshoot an IPv6 FlexVPN spoke-to-hub connectivity failure?

  1. show crypto lkev2 client flexvpn

  2. show crypto identity

  3. show crypto isakmp sa

  4. show crypto gkm

Answer: A

Question No: 56

Which protocol supports high availability in a Cisco IOS SSL VPN environment?

  1. HSRP

  2. VRRP

  3. GLBP

  4. IRDP

Answer: A

Question No: 57

Refer to the exhibit.

Ensurepass 2018 PDF and VCE

Which technology does this configuration demonstrate?

  1. AnyConnect SSL over IPv4 IPv6

  2. AnyConnect FlexVPN over IPv4 IPv6

  3. AnyConnect FlexVPN IPv6 over IPv4

  4. AnyConnect SSL IPv6 over IPv4

Answer: A

Question No: 58

Refer to the exhibit.

Ensurepass 2018 PDF and VCE

While troubleshooting on a remote-access VPN application, a new NOC engineer received the message that is shown.

What is the most likely cause of the problem?

  1. The IP address that is assigned to the PC of the VPN user is not within the range of addresses that are assigned to the SVC connection.

  2. The IP address that is assigned to the PC of the VPN user is in use. The remote user needs to select a different host address within the range.

  3. The IP address that is assigned to the PC of the VPN user is in the wrong subnet. The remote user needs to select a different host number within the correct subnet.

  4. The IP address pool for contractors was not applied to their connection profile.

Answer: D Explanation:

%ASA-5-722006: Group group User user-name IP IP_address Invalid address IP_address assigned to SVC connection.

Explanation An invalid address was assigned to the user.

Recommended Action Verify and correct the address assignment, if possible.

Question No: 59

Which algorithm provides both encryption and authentication for plane communication?

  1. RC4

  2. SHA-384

  3. AES-256

  4. SHA-96

  5. 3DES

  6. AES-GCM

Answer: F

Question No: 60

An engineer has configured Cisco AnyConnect VPN using IKEv2 on a Cisco ISO router. The user cannot connect in the Cisco AnyConnect client, but receives an alert message 鈥淯se a browser to gain access.鈥?Which action does the engineer take to eliminate this issue?

  1. Reset user login credentials.

  2. Disable the HTTP server.

  3. Correct the URL address.

  4. Connect using HTTPS.

Answer: B

100% Ensurepass Free Download!
Download Free Demo:300-209 Demo PDF
100% Ensurepass Free Guaranteed!
300-209 Dumps

EnsurePass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

Leave a Reply

Your email address will not be published. Required fields are marked *