300-209 vce (141 to 149)

300-209 Royal Pack Testengine pdf

100% Actual & Verified — 100% PASS

Unlimited access to the world's largest Dumps library!


Exam Code: 300-209 (Practice Exam Latest Test Questions VCE PDF)
Exam Name: Implementing Cisco Secure Mobility Solutions (SIMOS)
Certification Provider: Cisco
Free Today! Guaranteed Training- Pass 300-209 Exam.

2016 May 300-209 Study Guide Questions:

Q141. Refer to the exhibit. 

Which technology is represented by this configuration? 

A. AAA for FlexVPN 

B. AAA for EzVPN 

C. TACACS+ command authorization 

D. local command authorization 

Answer: A 

Q142. Which VPN solution is best for a collection of branch offices connected by MPLS that frequenty make VoIP calls between branches? 


B. Cisco AnyConnect 

C. site-to-site 


Answer: A 

Q143. A spoke has two Internet connections for failover. How can you achieve optimum failover without affecting any other router in the DMVPN cloud? 

A. Create another DMVPN cloud by configuring another tunnel interface that is sourced from the second ISP link. 

B. Use another router at the spoke site, because two ISP connections on the same router for the same hub is not allowed. 

C. Configure SLA tracking, and when the primary interface goes down, manually change the tunnel source of the tunnel interface. 

D. Create another tunnel interface with same configuration except the tunnel source, and configure the if-state nhrp and backup interface commands on the primary tunnel interface. 

Answer: C 

300-209  testing engine

Refresh 300-209 vce:

Q144. Which feature do you include in a highly available system to account for potential site failures? 

A. geographical separation of redundant devices 

B. hot/standby failover pairs 

C. Cisco ACE load-balancing with VIP 

D. dual power supplies 

Answer: A 

Q145. Which benefit of FlexVPN is not offered by DMVPN using IKEv1? 

A. Dynamic routing protocols can be configured. 

B. IKE implementation can install routes in routing table. 

C. GRE encapsulation allows for forwarding of non-IP traffic. 

D. NHRP authentication provides enhanced security. 

Answer: B 

Q146. An administrator desires that when work laptops are not connected to the corporate network, they should automatically initiate an AnyConnect VPN tunnel back to headquarters. Where does the administrator configure this? 

A. Via the svc trusted-network command under the group-policy sub-configuration mode on the ASA 

B. Under the "Automatic VPN Policy" section inside the Anyconnect Profile Editor within ASDM 

C. Under the TNDPolicy XML section within the Local Preferences file on the client computer 

D. Via the svc trusted-network command under the global webvpn sub-configuration mode on the ASA 

Answer: C 


100% Guarantee airaid 300-209:

Q147. If the IKEv2 tunnel were to establish successfully, which encryption algorithm would be used to encrypt traffic? 


B. 3DES 


D. AES192 

E. AES256 

Answer: E 


Both ASA’s are configured to support AES 256, so during the IPSec negotiation they will use the strongest algorithm that is supported by each peer. 

Q148. What URL do you use to download a packet capture file in a format which can be used by a packet analyzer? 

A. ftp://<hostname>/capture/<capture_name>/ 

B. https://<asdm_enabled _interface:port>/<capture_name>/ 

C. https://<asdm_enabled_interface:port>/admin/capture/<capture_name>/pcap 

D. https://<hostname>/<capture_name>/pcap 

Answer: C 

Q149. In FlexVPN, what is the role of a NHRP resolution request? 

A. It allows these entities to directly communicate without requiring traffic to use an intermediate hop 

B. It dynamically assigns VPN users to a group 

C. It blocks these entities from to directly communicating with each other 

D. It makes sure that each VPN spoke directly communicates with the hub 

Answer: A 

see more Implementing Cisco Secure Mobility Solutions (SIMOS)