PassLeader New Cisco Exam Dumps - CCNA, CCNP, CCIE, DevNet, CCDE Certification Exam Dumps VCE and PDF and Braindumps and Practice Tests
https://www.ciscovceplus.com/passleader-valid-300-209-dumps-with-vce-and-pdf-question-56-question-70.html
Export date: Fri Mar 29 10:12:15 2024 / +0000 GMT

PassLeader Valid 300-209 Dumps with VCE and PDF (Question 56 - Question 70)


New 300-209 exam questions from PassLeader 300-209 dumps! Welcome to download the newest PassLeader 300-209 VCE and PDF dumps: http://www.passleader.com/300-209.html 3 1 (406 Q&As --> 423 Q&As --> 462 Q&As)

P.S. Free 300-209 dumps are available on Google Drive shared by PassLeader: https://drive.google.com/open?id=0B-ob6L_QjGLpVTNFVTRPdC0zTnM 4 2

QUESTION 56 Which two are characteristics of GETVPN? (Choose two.)

A.    The IP header of the encrypted packet is preserved B.    A key server is elected among all configured Group Members C.    Unique encryption keys are computed for each Group Member D.    The same key encryption and traffic encryption keys are distributed to all Group Members

Answer: AD

QUESTION 57 A company has decided to migrate an existing IKEv1 VPN tunnel to IKEv2. Which two arevalid configuration constructs on a Cisco IOS router? (Choose two.)

A.    crypto ikev2 keyring keyring-name peer peer1 address 209.165.201.1 255.255.255.255 pre-shared-key local key1 pre-shared-key remote key2 B.    crypto ikev2 transform-set transform-set-name esp-3des esp-md5-hmac esp-aes esp-sha-hmac C.    crypto ikev2 map crypto-map-name set crypto ikev2 tunnel-group tunnel-group-name set crypto ikev2 transform-set transform-set-name D.    crypto ikev2 tunnel-group tunnel-group-name match identity remote address 209.165.201.1 authentication local pre-share authentication remote pre-share E.    crypto ikev2 profile profile-name match identity remote address 209.165.201.1 authentication local pre-share authentication remote pre-share

Answer: AE

QUESTION 58 Which four activities does the Key Server perform in a GETVPN deployment? (Choose four.)

A.    authenticates group members B.    manages security policy C.    creates group keys D.    distributes policy/keys E.    encrypts endpoint traffic F.    receives policy/keys G.    defines group members

Answer: ABCD

QUESTION 59 Where is split-tunneling defined for remote access clients on an ASA?

A.    Group-policy B.    Tunnel-group C.    Crypto-map D.    Web-VPN Portal E.    ISAKMP client

Answer: A

QUESTION 60 Which of the following could be used to configure remote access VPN Host-scan and pre- login policies?

A.    ASDM B.    Connection-profile CLI command C.    Host-scan CLI command under the VPN group policy D.    Pre-login-check CLI command

Answer: A

QUESTION 61 In FlexVPN, what command can an administrator use to create a virtual template interface that can be configured and applied dynamically to create virtual access interfaces?

A.    interface virtual-template number type template B.    interface virtual-template number type tunnel C.    interface template number type virtual D.    interface tunnel-template number

Answer: B

QUESTION 62 In FlexVPN, what is the role of a NHRP resolution request?

A.    It allows these entities to directly communicate without requiring traffic to use an intermediate hop B.    It dynamically assigns VPN users to a group C.    It blocks these entities from to directly communicating with each other D.    It makes sure that each VPN spoke directly communicates with the hub

Answer: A

QUESTION 63 What are three benefits of deploying a GET VPN? (Choose three.)

A.    It provides highly scalable point-to-point topologies. B.    It allows replication of packets after encryption. C.    It is suited for enterprises running over a DMVPN network. D.    It preserves original source and destination IP address information. E.    It simplifies encryption management through use of group keying. F.    It supports non-IP protocols.

Answer: BDE

QUESTION 64 What is the default topology type for a GET VPN?

A.    point-to-point B.    hub-and-spoke C.    full mesh D.    on-demand spoke-to-spoke

Answer: C

QUESTION 65 Which two GDOI encryption keys are used within a GET VPN network? (Choose two.)

A.    key encryption key B.    group encryption key C.    user encryption key D.    traffic encryption key

Answer: AD

QUESTION 66 What are the three primary components of a GET VPN network? (Choose three.)

A.    Group Domain of Interpretation protocol B.    Simple Network Management Protocol C.    server load balancer D.    accounting server E.    group member F.    key server

Answer: AEF

QUESTION 67 Refer to the exhibit. After the configuration is performed, which combination of devices can connect? passleader-300-209-dumps-671

A.    a device with an identity type of IPv4 address of 209.165.200.225 or 209.165.202.155 or a certificate with subject name of "cisco.com" B.    a device with an identity type of IPv4 address of both 209.165.200.225 and 209.165.202.155 or a certificate with subject name containing "cisco.com" C.    a device with an identity type of IPv4 address of both 209.165.200.225 and 209.165.202.155 and a certificate with subject name containing "cisco.com" D.    a device with an identity type of IPv4 address of 209.165.200.225 or 209.165.202.155 or a certificate with subject name containing "cisco.com"

Answer: D

QUESTION 68 Which three settings are required for crypto map configuration? (Choose three.)

A.    match address B.    set peer C.    set transform-set D.    set security-association lifetime E.    set security-association level per-host F.    set pfs

Answer: ABC

QUESTION 69 A network is configured to allow clientless access to resources inside the network. Which feature must be enabled and configured to allow SSH applications to respond on the specified port 8889?

A.    auto applet download B.    port forwarding C.    web-type ACL D.    HTTP proxy

Answer: B

QUESTION 70 Consider this scenario. When users attempt to connect via a Cisco AnyConnect VPN session, the certificate has changed and the connection fails. What is a possible cause of the connection failure?

A.    An invalid modulus was used to generate the initial key. B.    The VPN is using an expired certificate. C.    The Cisco ASA appliance was reloaded. D.    The Trusted Root Store is configured incorrectly.

Answer: C


New 300-209 exam questions from PassLeader 300-209 dumps! Welcome to download the newest PassLeader 300-209 VCE and PDF dumps: http://www.passleader.com/300-209.html 3 1 (406 Q&As --> 423 Q&As --> 462 Q&As)

P.S. Free 300-209 dumps are available on Google Drive shared by PassLeader: https://drive.google.com/open?id=0B-ob6L_QjGLpVTNFVTRPdC0zTnM 4 2

Links:
  1. http://www.passleader.com/300-209.html
  2. https://drive.google.com/open?id=0B-ob6L_QjGLpVTNF VTRPdC0zTnM
  3. http://www.passleader.com/300-209.html
  4. https://drive.google.com/open?id=0B-ob6L_QjGLpVTNF VTRPdC0zTnM
Post date: 2016-11-16 08:17:37
Post date GMT: 2016-11-16 08:17:37

Post modified date: 2019-12-16 05:39:45
Post modified date GMT: 2019-12-16 05:39:45

Export date: Fri Mar 29 10:12:15 2024 / +0000 GMT
This page was exported from PassLeader New Cisco Exam Dumps - CCNA, CCNP, CCIE, DevNet, CCDE Certification Exam Dumps VCE and PDF and Braindumps and Practice Tests [ https://www.ciscovceplus.com ]
Export of Post and Page has been powered by [ Universal Post Manager ] plugin from www.ProfProjects.com