Ensurepass.com : Ensure you pass the IT Exams
2018 Aug Cisco Official New Released 300-209
100% Free Download! 100% Pass Guaranteed!
Implementing Cisco Secure Mobility Solutions
Question No: 141
Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list? (Choose two.)
-
group-alias
-
certificate map
-
use gateway command
-
group-url
-
AnyConnect client version
Answer: B,D
Question No: 142
Which PKI enrollment method allows the user to separate authentication and enrollment actions and also provides an option to specify HTTP/TFTP commands to perform file retrieval from the server?
-
enrollment profile
-
enrollment terminal
-
enrollment url
-
enrollment selfsigned
Answer: A
Question No: 143
When Cisco ASA applies VPN permissions, what is the first set of attributes that it applies?
-
dynamic access policy attributes
-
group policy attributes
-
connection profile attributes
-
user attributes
Answer: A
Question No: 144
Refer to the exhibit.
A NOC engineer needs to tune some prelogin parameters on an SSL VPN tunnel.
From the information that is shown, where should the engineer navigate to find the prelogin session attributes?
-
quot;engineeringquot; Group Policy
-
quot;contractorquot; Connection Profile
-
quot;engineer1quot; AAA/Local Users
-
DfltGrpPolicy Group Policy
Answer: B Explanation:
http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/administrat ion/guide/ac05hostscanposture.html#wp1039696
Question No: 145
Which two statements are true when designing a SSL VPN solution using Cisco AnyConnect? (Choose two.)
-
The VPN server must have a self-signed certificate.
-
A SSL group pre-shared key must be configured on the server.
-
Server side certificate is optional if using AAA for client authentication.
-
The VPN IP address pool can overlap with the rest of the LAN networks.
-
DTLS can be enabled for better performance.
Answer: D,E
Question No: 146
Which option is one component of a Public Key Infrastructure?
-
the Registration Authority
-
Active Directory
-
RADIUS
-
TACACS
Answer: A
Question No: 147
Which cryptographic algorithms are a part of the Cisco NGE suite?
-
HIPPA DES
-
AES-CBC-128
C. RC4-128
D. AES-GCM-256
Answer: D
Reference: https://www.cisco.com/web/learning/le21/le39/docs/tdw166_prezo.pdf
Question No: 148
Scenario:
You are the senior network security administrator for your organization. Recently and junior engineer configured a site-to-site IPsec VPN connection between your headquarters Cisco ASA and a remote branch office.
You are now tasked with verifying the IKEvl IPsec installation to ensure it was properly configured according to designated parameters. Using the CLI on both the Cisco ASA and branch ISR, verify the IPsec configuration is properly configured between the two sites.
NOTE: the show running-config command cannot be used for this exercise.
Topology:
Which transform set is being used on the branch ISR?
-
Default
-
ESP-3DES ESP-SHA-HMAC
-
ESP-AES-256-MD5-TRANS mode transport
-
TSET
Answer: B Explanation:
This can be seen from the 鈥渟how crypto ipsec sa鈥?command as shown below:
Question No: 149
Which option describes what address preservation with IPsec Tunnel Mode allows when GETVPN is used?
-
stronger encryption methods
-
Network Address Translation of encrypted traffic
-
traffic management based on original source and destination addresses
-
Tunnel Endpoint Discovery
Answer: C
Question No: 150
What URL do you use to download a packet capture file in a format which can be used by a packet analyzer?
-
ftp://lt;hostnamegt;/capture/lt;capture_namegt;/
-
https://lt;asdm_enabled _interface:portgt;/lt;capture_namegt;/
-
https://lt;asdm_enabled_interface:portgt;/admin/capture/lt;capture_namegt;/pcap
-
https://lt;hostnamegt;/lt;capture_namegt;/pcap
Answer: C
100% Ensurepass Free Download!
–Download Free Demo:300-209 Demo PDF
100% Ensurepass Free Guaranteed!
–300-209 Dumps
EnsurePass | ExamCollection | Testking | |
---|---|---|---|
Lowest Price Guarantee | Yes | No | No |
Up-to-Dated | Yes | No | No |
Real Questions | Yes | No | No |
Explanation | Yes | No | No |
PDF VCE | Yes | No | No |
Free VCE Simulator | Yes | No | No |
Instant Download | Yes | No | No |