[Free] 2018(Mar) EnsurePass Braindumps Cisco 300-209 Dumps with VCE and PDF 91-100

Ensurepass.com : Ensure you pass the IT Exams
2018 Mar Cisco Official New Released 300-209
100% Free Download! 100% Pass Guaranteed!

Implementing Cisco Secure Mobility Solutions

Question No: 91

Which three parameters are specified in the isakmp (IKEv1) policy? (Choose three.)

  1. the hashing algorithm

  2. the authentication method

  3. the lifetime

  4. the session key

  5. the transform-set

  6. the peer

Answer: A,B,C

Question No: 92

Which two changes must be made to migrate from DMVPN Phase 2 to Phase 3 when EIGRP is configured? (Choose two )

  1. Disable EIGRP next-hop-self on the hub.

  2. Enable EIGRP next-hop-self on the hub.

  3. Acid NHRP shortcuts on the hub.

  4. Add NHRP redirects on the hub.

  5. Add NHRP redirects on the spoke.

Answer: B,D

Question No: 93

An engineer is troubleshooting a DMVPN spoken router and sees a CRPTO-4- IKMP_BAD_MESSAGE debug message that a spoke router 鈥渇ailed its sanity check or is malformed鈥?Which issue does the error message indicate?

  1. mismatched preshared key

  2. unsupported transform propsal

  3. invalid IP packet SPI

  4. incompatible transform set

Answer: A

Question No: 94

What are two benefits of DMVPN Phase 3? (Choose two.)

  1. Administrators can use summarization of routing protocol updates from hub to spokes.

  2. It introduces hierarchical DMVPN deployments.

  3. It introduces non-hierarchical DMVPN deployments.

  4. It supports L2TP over IPSec as one of the VPN protocols.

Answer: A,B

Question No: 95

Which two IKEv1 policy options must match on each peer when you configure an IPsec site-to-site VPN? (Choose two.)

  1. priority number

  2. hash algorithm

  3. encryption algorithm

  4. session lifetime

  5. PRF algorithm

Answer: B,C

Question No: 96

Which three plugins are available for clientless SSL VPN? (Choose three.)

  1. CIFS

  2. RDP2

  3. SSH

  4. VNC


  6. ICMP

Answer: B,C,D

Question No: 97

Which protocol can be used for better throughput performance when using Cisco AnyConnect VPN?

  1. TLSv1

  2. TLSv1.1

  3. TLSv1.2

  4. DTLSv1

Answer: D

Question No: 98 CORRECT TEXT


You are the network security manager for your organization. Your manager has received a request to allow an external user to access to your HQ and DM2 servers. You are given the following connection parameters for this task.

Using ASDM on the ASA, configure the parameters below and test your configuration by accessing the Guest PC. Not all AS DM screens are active for this exercise. Also, for this exercise, all changes are automatically applied to the ASA and you will not have to click APPLY to apply the changes manually.