300-209 exam

When Cisco ASA applies VPN permissions, what is the first set of attributes that it applies?A . dynamic access policy attributesB . group policy attributesC . connection profile attributesD . user attributesView AnswerAnswer: A

When you configure IPsec VPN High Availability Enhancements, which technology does Cisco recommend that you enable to make reconvergence faster?A . EOTB . IP SLAsC . periodic IKE keepalivesD . VPN fast detectionView AnswerAnswer: C

You are troubleshooting a site-to-site VPN issue where the tunnel is not establishing. After issuing the debug crypto isakmp command on the headend router, you see the following output. What does this output suggest? 1d00h: ISAKMP (0:1): atts are not acceptable. Next payload is 0 1d00h: ISAKMP (0:1); no offers...

A Cisco IOS SSL VPN gateway is configured to operate in clientless mode so that users can access file shares on a Microsoft Windows 2003 server. Which protocol is used between the Cisco IOS router and the Windows server?A . HTTPSB . NetBIOSC . CIFSD . HTTPView AnswerAnswer: C

What are two variables for configuring clientless SSL VPN single sign-on? (Choose two.)A . CSCO_WEBVPN_OTP_PASSWORDB . CSCO_WEBVPN_INTERNAL_PASSWORDC . CSCO_WEBVPN_USERNAMED . CSCO_WEBVPN_RADIUS_USERView AnswerAnswer: B, C

After implementing the IKEv2 tunnel, it was observed that remote users on the 192.168.33.0/24 network are unable to access the internet. Which of the following can be done to resolve this problem?A . Change the Diffie-Hellman group on the headquarter ASA to group5forthe dynamic crypto mapB . Change the remote...

In DMVPN phase 2, which two EIGRP features need to be disabled on the hub to allow spoke-to-spoke communication? (Choose two.)A . autosummaryB . split horizonC . metric calculation using bandwidthD . EIGRP address familyE . next-hop-selfF . default administrative distanceView AnswerAnswer: B, E

Which two statements describe effects of the DoNothing option within the untrusted network policy on a Cisco AnyConnect profile? (Choose two.)A . The client initiates a VPN connection upon detection of an untrusted network.B . The client initiates a VPN connection upon detection of a trusted network.C . The always-on...

When an IPsec SVTI is configured, which technology processes traffic forwarding for encryption?A . ACLB . IP routingC . RRID . front door VPN routing and forwardingView AnswerAnswer: B

An IOS SSL VPN is configured to forward TCP ports. A remote user cannot access the corporate FTP site with a Web browser. What is a possible reason for the failure?A . The user's FTP application is not supported.B . The user is connecting to an IOS VPN gateway configured...