Name: Cisco 300-209 Exam
Brand: Pass4Success
SKU: 300-209
Price: 69.00 USD
Availability: InStock
Rating: 4.7 (51 reviews)

Disscuss Cisco 300-209 Topics, Questions or Ask Anything Related

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!

Free Cisco 300-209 Exam Actual Questions

The questions for 300-209 were last updated On 04-04-2020

Question #1

What is a characteristics of GETVPN?

AThe IP header of the encrypted packet is preserved

BA key server is elected among all configured Group Members

CUnique encryption keys are computed for each Group Member

DDifferent key encryption and traffic encryption keys are distributed to all Group members.

Reveal Solution

Correct Answer: A

Question #2

A user with IP address 10.10.10.10 is unable to access a HTTP website at IP address 209.165.200.225 through a Cisco AS

AWhich two features and commands will help troubleshoot the issue? (Choose two.)

ACapture user traffic using command capture capin interface inside match ip host 10.10.10.10 any

BAfter verifying that user traffic reaches the firewall using syslogs or captures, use packet tracer command packet-tracer input inside tcp 10.10.10.10 1234 209.165.200.225 80

CEnable logging at level 1 and check the syslogs using commands logging enable, logging buffered 1 and show logging | include 10.10.10.10

DCheck if an access-list on the firewall is blocking the user by using command show running-config access-list | include 10.10.10.10

EUse packet tracer command packet-tracer input inside udp 0.10.10.10 1234192.168.1.3 161 to see what the firewall is doing with the user's traffic

Reveal Solution

Correct Answer: A, A, B

Question #3

Which of the following could be used to configure remote access VPN Host-scan and pre-login policies?

AASDM only

BConnection-profile CLI command

CHost-scan CLI command under the VPN group policy

DPre-login-check CLI command

Reveal Solution

Correct Answer: A

Question #4

In the Diffie-Hellman protocol, which type of key is the shared secret?

Aa symmetric key

Ban asymmetric key

Ca decryption key

Dan encryption key

Reveal Solution

Correct Answer: A

Question #5

An administrator wishes to limit the networks reachable over the Anyconnect VPN tunnels. Which configuration on the ASA will correctly limit the networks reachable to 209.165.201.0/27 and 209.165.202.128/27?

Aaccess-list splitlist standard permit 209.165.201.0 255.255.255.224
access-list splitlist standard permit 209.165.202.128 255.255.255.224
!
group-policy GroupPolicy1 internal
group-policy GroupPolicy1 attributes
split-tunnel-policy tunnelspecified
split-tunnel-network-list value splitlist

Baccess-list splitlist standard permit 209.165.201.0 255.255.255.224
access-list splitlist standard permit 209.165.202.128 255.255.255.224
!
group-policy GroupPolicy1 internal
group-policy GroupPolicy1 attributes
split-tunnel-policy tunnelall
split-tunnel-network-list value splitlist

Cgroup-policy GroupPolicy1 internal
group-policy GroupPolicy1 attributes
split-tunnel-policy tunnelspecified
split-tunnel-network-list ipv4 1 209.165.201.0 255.255.255.224
split-tunnel-network-list ipv4 2 209.165.202.128 255.255.255.224

Daccess-list splitlist standard permit 209.165.201.0 255.255.255.224
access-list splitlist standard permit 209.165.202.128 255.255.255.224
!
crypto anyconnect vpn-tunnel-policy tunnelspecified
crypto anyconnect vpn-tunnel-network-list splitlist

Ecrypto anyconnect vpn-tunnel-policy tunnelspecified
crypto anyconnect split-tunnel-network-list ipv4 1 209.165.201.0 255.255.255.224
crypto anyconnect split-tunnel-network-list ipv4 2 209.165.202.128 255.255.255.224

Reveal Solution

Correct Answer: A

Unlock all 300-209 Exam Questions with Advanced Practice Test Features:

Select Question Types you want
Set your Desired Pass Percentage
Allocate Time (Hours : Minutes)
Create Multiple Practice tests with Limited Questions
Customer Support

Get Full Access Now