[Free] 2018(May) EnsurePass Testking Cisco 300-209 Dumps with VCE and PDF 131-140

Ensurepass.com : Ensure you pass the IT Exams
2018 May Cisco Official New Released 300-209
100% Free Download! 100% Pass Guaranteed!

Implementing Cisco Secure Mobility Solutions

Question No: 131

Ensurepass 2018 PDF and VCE

Refer to the exhibit. Client 1 cannot communication with Client 2. Both clients are using Cisco AnyConnect and have established a successful SSL VPN connection to the hub ASA. Which command on the ASA is missing?

  1. same-security-traffic permit inter-interface

  2. same-security-traffic permit intera-interface

  3. dns-server value 10.1.1.3

  4. split-tunnel-network list

Answer: B

Question No: 132

Which adaptive security appliance command can be used to see a generic framework of

the requirements for configuring a VPN tunnel between an adaptive security appliance and a Cisco IOS router at a remote office?

  1. vpnsetup site-to-site steps

  2. show running-config crypto

  3. show vpn-sessiondb l2l

  4. vpnsetup ssl-remote-access steps

Answer: A

Question No: 133

Refer to the exhibit.

Ensurepass 2018 PDF and VCE

What is the problem with the IKEv2 site-to-site VPN tunnel?

  1. incorrect PSK

  2. crypto access list mismatch

  3. incorrect tunnel group

  4. crypto policy mismatch

  5. incorrect certificate

Answer: D

Question No: 134

A company has a Flex VPN solution for remote access and one of their Cisco any Connect remote

clients is having trouble connecting property. Which command verifies that packets are

being

encrypted and decrypted?

  1. show crypto session active

  2. show crypto ikev2 stats

  3. show crypto ikev1 sa

  4. show crypto ikev2 sa

  5. show crypto session detail

Answer: E

Question No: 135

Which VPN type can be used to provide secure remote access from public internet cafes and airport kiosks?

  1. site-to-site

  2. business-to-business

  3. Clientless SSL

  4. DMVPN

Answer: C

Question No: 136

Refer to the exhibit.

Ensurepass 2018 PDF and VCE

You executed the show crypto ipsec sa command to troubleshoot an IPSec issue. What problem does the given output indicate?

  1. IKEv2 failed to establish a phase 2 negotiation.

  2. The Crypto ACL is different on the peer device.

  3. ISAKMP was unable to find a matching SA.

  4. IKEv2 was used in aggressive mode.

Answer: B

Question No: 137

Which two troubleshooting steps should be taken when Cisco AnyConnect cannot establish an IKEv2 connection, while SSL works fine? (Choose two.)

  1. Verify that the primary protocol on the client machine is set to IPsec.

  2. Verify that AnyConnect is enabled on the correct interface.

  3. Verify that the IKEv2 protocol is enabled on the group policy.

  4. Verify that ASDM and AnyConnect are not using the same port.

  5. Verify that SSL and IKEv2 certificates are not referencing the same trustpoint.

Answer: A,C

Question No: 138

An XYZ Corporation systems engineer, while making a sales call on the ABC Corporation headquarters, tried to access the XYZ sales demonstration folder to transfer a demonstration via FTP from an ABC conference room behind the firewall. The engineer could not reach XYZ through the remote-access VPN tunnel. From home the previous day, however, the engineer did connect to the XYZ sales demonstration folder and transferred the demonstration via IPsec over DSL.

To get the connection to work and transfer the demonstration, what should the engineer do?

  1. Change the MTU size on the IPsec client to account for the change from DSL to cable transmission.

  2. Enable the local LAN access option on the IPsec client.

  3. Enable the IPsec over TCP option on the IPsec client.

  4. Enable the clientless SSL VPN option on the PC.

Answer: C

Explanation:

IP Security (IPSec) over Transmission Control Protocol (TCP) enables a VPN Client to operate in an environment in which standard Encapsulating Security Protocol (ESP, Protocol 50) or Internet Key Exchange (IKE, User Datagram Protocol (UDP) 500) cannot function, or can function only with modification to existing firewall rules. IPSec over TCP encapsulates both the IKE and IPSec protocols within a TCP packet, and it enables secure tunneling through both Network Address Translation (NAT) and Port Address Translation (PAT) devices and firewalls

Question No: 139

Refer to the exhibit.

Ensurepass 2018 PDF and VCE

A new NOC engineer, while viewing a real-time log from an SSL VPN tunnel, has a question about a line in the log.

The IP address 172.26.26.30 is attached to which interface in the network?

  1. the Cisco ASA physical interface

  2. the physical interface of the end user

  3. the Cisco ASA SSL VPN tunnel interface

  4. the SSL VPN tunnel interface of the end user

Answer: B

Question No: 140

Refer to the exhibit.

Ensurepass 2018 PDF and VCE

The network administrator is adding a new spoke, but the tunnel is not passing traffic. What could cause this issue?

  1. DMVPN is a point-to-point tunnel, so there can be only one spoke.

  2. There is no EIGRP configuration, and therefore the second tunnel is not working.

  3. The NHRP authentication is failing.

  4. The transform set must be in transport mode, which is a requirement for DMVPN.

  5. The NHRP network ID is incorrect.

Answer: C

Reference:

http://www.cisco.com/c/en/us/td/docs/ios/12_4/ip_addr/configuration/guide/hadnhrp.html#w p1055049

100% Ensurepass Free Download!
Download Free Demo:300-209 Demo PDF
100% Ensurepass Free Guaranteed!
Download 2018 EnsurePass 300-209 Full Exam PDF and VCE

EnsurePass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No