Want to know Pass4sure 300-209 Exam practice test features? Want to lear more about Cisco Implementing Cisco Secure Mobility Solutions (SIMOS) certification experience? Study Simulation Cisco 300-209 answers to Update 300-209 questions at Pass4sure. Gat a success with an absolute guarantee to pass Cisco 300-209 (Implementing Cisco Secure Mobility Solutions (SIMOS)) test on your first attempt.

Q91. If the IKEv2 tunnel were to establish successfully, which encryption algorithm would be used to encrypt traffic? 

A. DES 

B. 3DES 

C. AES 

D. AES192 

E. AES256 

Answer:

Explanation: 

Both ASA’s are configured to support AES 256, so during the IPSec negotiation they will use the strongest algorithm that is supported by each peer. 


Q92. Which command will prevent a group policy from inheriting a filter ACL in a clientless SSL VPN? 

A. vpn-filter none 

B. no vpn-filter 

C. filter value none 

D. filter value ACLname 

Answer:

Reference: 

http://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/T-Z/cmdref4/v.html#pgfId-1842564 


Q93. As network security architect, you must implement secure VPN connectivity among company branches over a private IP cloud with any-to-any scalable connectivity. Which.technology should you use? 

A. IPsec DVTI 

B. FlexVPN 

C. DMVPN 

D. IPsec SVTI 

E. GET VPN 

Answer:


Q94. Which three parameters must match on all routers in a DMVPN Phase 3 cloud? (Choose three.) 

A. NHRP network ID 

B. GRE tunnel key 

C. NHRP authentication string 

D. tunnel VRF 

E. EIGRP process name 

F. EIGRP split-horizon setting 

Answer: A,B,C 


Q95. Scenario: 

You are the senior network security administrator for your organization. Recently and junior engineer configured a site-to-site IPsec VPN connection between your headquarters Cisco ASA and a remote branch office. 

You are now tasked with verifying the IKEvl IPsec installation to ensure it was properly configured according to designated parameters. Using the CLI on both the Cisco ASA and branch ISR, verify the IPsec configuration is properly configured between the two sites. 

NOTE: the show running-config command cannot be used for this exercise. 

Topology: 

In what state is the IKE security association in on the Cisco ASA? 

A. There are no security associations in place 

B. MM_ACTIVE 

C. ACTIVE(ACTIVE) 

D. QM_IDLE 

Answer:

Explanation: 

This can be seen from the "show crypto isa sa" command: 


Q96. Which feature is enabled by the use of NHRP in a DMVPN network? 

A. host routing with Reverse Route Injection 

B. BGP multiaccess 

C. host to NBMA resolution 

D. EIGRP redistribution 

Answer:


Q97. Which two RADIUS attributes are needed for a VRF-aware FlexVPN hub? (Choose two.) 

A. ip:interface-config=ip unnumbered loobackn 

B. ip:interface-config=ip vrf forwarding ivrf 

C. ip:interface-config=ip src route 

D. ip:interface-config=ip next hop 

E. ip:interface-config=ip neighbor 0.0.0.0 

Answer: A,B 


Q98. Refer to the exhibit. 

Which type of mismatch is causing the problem with the IPsec VPN tunnel? 

A. PSK 

B. Phase 1 policy 

C. transform set 

D. crypto access list 

Answer:


Q99. Which are two main use cases for Clientless SSL VPN? (Choose two.) 

A. In kiosks that are part of a shared environment 

B. When the users do not have admin rights to install a new VPN client 

C. When full tunneling is needed to support applications that use TCP, UDP, and ICMP 

D. To create VPN site-to-site tunnels in combination with remote access 

Answer: A,B 


Q100. Which protocol does DTLS use for its transport? 

A. TCP 

B. UDP 

C. IMAP 

D. DDE 

Answer: