CCNP Security 300-209 Free Questions – Implementing Cisco Secure Mobility Solutions

1. .Which encryption algorithm does Cisco recommend that you avoid?

2. What are two benefits of using DTLS when implementing a Cisco AnyConnect SSI VPN on a Cisco ASA or router? (Choose two.)

3. An engineer is troubleshooting an IPsec site-to-site tunnel and verifies that the tunnel status is MM_WAIT_MSG6.

What can be determined from this message?

4. Which cryptographic algorithm is used for data integrity?

5. An engineer is configuring a site-t-site VPM tunnel.

Which two IKV1 parameter must match on both peers? (Choose two.

6. A network engineer is troubleshooting a VPN configured on an ASA and has found Phase 1 is not completing.

Which configured parameter must match for the IKE Phase 1 tunnel to get successfully negotiated?

7. An engineer must set up a site-to-site VPN implementation with an any-to-any topology that provides secures routing across the router backbone.

Which VPN technology allows a shared IPsec SA to be used?

8. An engineer must configure HET VPN transverse over the network between corporate offices.

Which two options are key advantages to choosing GET VPN EssaVPN? (Choose two.)

9. What does DAK l stand for?

10. When you confrere an access list on the external interface of a FlexVPN hub. which step is optional?

11. Within a PKI system, which option is a trusted entity?

12. What are two features of Cisco GET VPN? (Choose two.)

13. A company’s remote locations connect to data centers via MPLS. A new request requires that unicast traffic that exist the remote location be encrypted.

Which no tunneled technology can be used to satisfy this requirement?

14. Why must a network engineer avoid usage of the default X509 certificate when implementing clientless SSLVPN on an ASA?

15. A customer requires site-to-site VPNs to connect third-party business partners and has purchased two ASAs. The customer requests an active/active configuration.

Which model is needed to support an active/active solution?

16. From the CLI of a Cisco ASA 5520, which command shows specific information about current clientless and Cisco Anyconnect SSL VPN users only?

17. Which option is one of the difference between FlexVPN and DMVPN?

18. Which two attributes can be matched from the identity of the remote peer when using IKEv2 Name Manager? (Choose two.)

19. Which command will allow a referenced ASA interface to become accessible across a site-to-site VPN?

20. An engineer is configuring SSL VPN to provide access to a corporate network for remote users.

Traffic destined to the enterprise IP range should go over the tunnel and all other traffic should go directly to the internet.

Which feature should be configured?