Download Implementing Cisco Secure Mobility Solutions.test-king.300-209.2019-09-19.1e.245q.vcex
Download Exam
File Info
| Exam | Implementing Cisco Secure Mobility Solutions |
| Number | 300-209 |
| File Name | Implementing Cisco Secure Mobility Solutions.test-king.300-209.2019-09-19.1e.245q.vcex |
| Size | 17.17 Mb |
| Posted | September 19, 2019 |
| Downloads | 44 |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: EXAMFILESCOM
With discount: 20%
Demo Questions
Question 1
Which two are characteristics of GETVPN? (Choose two.)
- A: The IP header of the encrypted packet is preserved
- B: A key server is elected among all configured Group Members
- C: Unique encryption keys are computed for each Group Member
- D: The same key encryption and traffic encryption keys are distributed to all Group Members
Question 2
Which four activities does the Key Server perform in a GETVPN deployment? (Choose four.)
- A: authenticates group members
- B: manages security policy
- C: creates group keys
- D: distributes policy/keys
- E: encrypts endpoint traffic
- F: receives policy/keys
- G: defines group members
Question 3
Where is split-tunneling defined for remote access clients on an ASA?
- A: Group-policy
- B: Tunnel-group
- C: Crypto-map
- D: Web-VPN Portal
- E: ISAKMP client
Question 4
In FlexVPN, what is the role of a NHRP resolution request?
- A: It allows these entities to directly communicate without requiring traffic to use an intermediate hop
- B: It dynamically assigns VPN users to a group
- C: It blocks these entities from to directly communicating with each other
- D: It makes sure that each VPN spoke directly communicates with the hub
Question 5
What is the default topology type for a GET VPN?
- A: point-to-point
- B: hub-and-spoke
- C: full mesh
- D: on-demand spoke-to-spoke
Question 6
What are the three primary components of a GET VPN network? (Choose three.)
- A: Group Domain of Interpretation protocol
- B: Simple Network Management Protocol
- C: server load balancer
- D: accounting server
- E: group member
- F: key server
Question 7
Which two IKEv1 policy options must match on each peer when you configure an IPsec site-to-site VPN? (Choose two.)
- A: priority number
- B: hash algorithm
- C: encryption algorithm
- D: session lifetime
- E: PRF algorithm
Question 8
Which two parameters are configured within an IKEv2 proposal on an IOS router? (Choose two.)
- A: authentication
- B: encryption
- C: integrity
- D: lifetime
Question 9
Refer to the exhibit.
After the configuration is performed, which combination of devices can connect?
After the configuration is performed, which combination of devices can connect?
- A: a device with an identity type of IPv4 address of 209.165.200.225 or 209.165.202.155 or a certificate with subject name of "cisco.com"
- B: a device with an identity type of IPv4 address of both 209.165.200.225 and 209.165.202.155 or a certificate with subject name containing "cisco.com"
- C: a device with an identity type of IPv4 address of both 209.165.200.225 and 209.165.202.155 and a certificate with subject name containing "cisco.com"
- D: a device with an identity type of IPv4 address of 209.165.200.225 or 209.165.202.155 or a certificate with subject name containing "cisco.com"
Question 10
Which three settings are required for crypto map configuration? (Choose three.)
- A: match address
- B: set peer
- C: set transform-set
- D: set security-association lifetime
- E: set security-association level per-host
- F: set pfs
HOW TO OPEN VCEX AND EXAM FILES
Use ProfExam Simulator to open VCEX and EXAM files
HOW TO OPEN VCE FILES
Use VCE Exam Simulator to open VCE files
