Free Cisco 300-209 Exam Dumps Questions & Answers

Which two operational advantages does GetVPN offer site-to-site IPSec tunnel in a private MPLS-based core network? (choose two)

• A.Group Domain of interpretation protocol allows for homomorphic encryption, which allows group members to operate on message without decrypting them
• B.Key servers perform encryption and decryption of all the data in the network, which allows for tight security policies
• C.Packets carry original source and destination IP addresses, which allows for optimal routing of encrypted traffic
• D.Traffic uses one VRF to encrypt data and a different one to decrypt data, which allows for multicast traffic isolation
• E.GETVPN is tunnel -less, which allows any group member to perform decryption and routing around network failures

Why must a network engineer avoid usage of the default X.509 certificate when implementing clientless SSLVPN on an ASA?

• A.The certificate is too weak to provide adequate security
• B.The certificate is regenerated at each reboot
• C.The default X.509 certificate is not supported for SSLVPN
• D.The certificate must be managed by the local CA

An engineer must set up a site-to site VPN implementation with an any-to-any topology that provides secure routing across the router backbone. Which VPN technology allows a shared IPSec SA to be used?

• A.FlexVPN
• B.IPsec VPN
• C.GET VPN
• D.DMVPN

An engineer is troubleshooting IPsec VPN and wants to review the IKE
connectivity status between peers, Which IKE status indicates that all is running properly?

• A.MM_SA_SETUP
• B.AG_AUTH
• C.AC_INIT_EXCH
• D.QM_IDLE

An engineer is defining ECC variables and has set the input_mode set to B.
Which statement is true?

• A.Get Digits are written to the CED.
• B.Mixed mode input is not accepted.
• C.DTMF or voice is accepted
• D.An ASR is not being used.