300-209 Exam Questions - Online Test

300-209 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Examcollection offers free demo for 300-209 exam. "Implementing Cisco Secure Mobility Solutions (SIMOS)", also known as 300-209 exam, is a Cisco Certification. This set of posts, Passing the Cisco 300-209 exam, will help you answer those questions. The 300-209 Questions & Answers covers all the knowledge points of the real exam. 100% real Cisco 300-209 exams and revised by experts!

Q121. Refer to the exhibit. 

Which two characteristics of the VPN implementation are evident? (Choose two.) 

A. dual DMVPN cloud setup with dual hub 

B. DMVPN Phase 3 implementation 

C. single DMVPN cloud setup with dual hub 

D. DMVPN Phase 1 implementation 

E. quad DMVPN cloud with quadra hub 

F. DMVPN Phase 2 implementation 

Answer: B,C 

Q122. Which feature enforces the corporate policy for Internet access to Cisco AnyConnect VPN users? 

A. Trusted Network Detection 

B. Datagram Transport Layer Security 

C. Cisco AnyConnect Customization 

D. banner message 

Answer: A 

Q123. In the Diffie-Hellman protocol, which type of key is the shared secret? 

A. a symmetric key 

B. an asymmetric key 

C. a decryption key 

D. an encryption key 

Answer: A 

Q124. Which three commands are included in the command show dmvpn detail? (Choose three.) 

A. show ip nhrp nhs 

B. show dmvpn 

C. show crypto session detail 

D. show crypto ipsec sa detail 

E. show crypto sockets 

F. show ip nhrp 

Answer: A,B,C 

Q125. Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list? (Choose two.) 

A. group-alias 

B. certificate map 

C. use gateway command 

D. group-url 

E. AnyConnect client version 

Answer: B,D 

Q126. Refer to the exhibit. 

Which authentication method was used by the remote peer to prove its identity? 

A. Extensible Authentication Protocol 

B. certificate authentication 

C. pre-shared key 

D. XAUTH 

Answer: C 

Q127. Scenario 

Your organization has just implemented a Cisco AnyConnect SSL VPN solution. Using Cisco ASDM, answer the questions regarding the implementation. 

Note: Not all screens or option selections are active for this exercise. 

Topology 

Default_Home 

Which two networks will be included in the secured VPN tunnel? (Choose two.) 

A. 10.10.0.0/16 

B. All networks will be securely tunneled 

C. Networks with a source of any4 

D. 10.10.9.0/24 

E. DMZ network 

Answer: A,E 

Explanation: 

Navigate to the Configuration -> Remote Access -> Group Policies tab to observe the following: 

Then, click on the DlftGrpPolicy to see the following: 

On the left side, select “Split Tunneling” to get to this page: 

Here you see that the Network List called “Inside Subnets” is being tunneled (secured). Select Manage to see the list of networks 

Here we see that the 10.10.0.0/16 and DMZ networks are being secured over the tunnel.