We provide real 300-209 exam questions and answers braindumps in two formats. Download PDF & Practice Tests. Pass Cisco 300-209 Exam quickly & easily. The 300-209 PDF type is available for reading and printing. You can print more and practice many times. With the help of our Cisco 300-209 dumps pdf and vce product and material, you can easily pass the 300-209 exam.

Q81. Which technology does a multipoint GRE interface require to resolve endpoints? 

A. ESP 

B. dynamic routing 

C. NHRP 

D. CEF 

E. IPSec 

Answer:


Q82. Refer to the exhibit. 

You executed the show crypto ipsec sa command to troubleshoot an IPSec issue. What problem does the given output indicate? 

A. IKEv2 failed to establish a phase 2 negotiation. 

B. The Crypto ACL is different on the peer device. 

C. ISAKMP was unable to find a matching SA. 

D. IKEv2 was used in aggressive mode. 

Answer:


Q83. Which application does the Application Access feature of Clientless VPN support? 

A. TFTP 

B. VoIP 

C. Telnet 

D. active FTP 

Answer:


Q84. Which cryptographic algorithms are approved to protect Top Secret information? 

A. HIPPA DES 

B. AES-128 

C. RC4-128 

D. AES-256 

Answer:


Q85. Which command enables IOS SSL VPN Smart Tunnel support for PuTTY? 

A. appl ssh putty.exe win 

B. appl ssh putty.exe windows 

C. appl ssh putty 

D. appl ssh putty.exe 

Answer:


Q86. Which Cisco firewall platform supports Cisco NGE? 

A. FWSM 

B. Cisco ASA 5505 

C. Cisco ASA 5580 

D. Cisco ASA 5525-X 

Answer:


Q87. Which.protocol must be enabled on the inside interface to use cluster encryption in SSL VPN load balancing? 

A. TLS 

B. DTLS 

C. IKEv2 

D. ISAKMP 

Answer:


Q88. Refer to the exhibit. 

Which two characteristics of the VPN implementation are evident? (Choose two.) 

A. dual DMVPN cloud setup with dual hub 

B. DMVPN Phase 3 implementation 

C. single DMVPN cloud setup with dual hub 

D. DMVPN Phase 1 implementation 

E. quad DMVPN cloud with quadra hub 

F. DMVPN Phase 2 implementation 

Answer: B,C 


Q89. Which encryption and authentication algorithms does Cisco recommend when deploying a Cisco NGE supported VPN solution? 

A. AES-GCM and SHA-2 

B. 3DES and DH 

C. AES-CBC and SHA-1 

D. 3DES and SHA-1 

Answer:


Q90. Refer to the exhibit. 

Which VPN solution does this configuration represent? 

A. Cisco AnyConnect (IKEv2) 

B. site-to-site 

C. DMVPN 

D. SSL VPN 

Answer: