IT인증시험은 국제적으로 인정받는 자격증을 취득하는 과정이라 난이도가 아주 높습니다. Cisco 300-209 (Implementing Cisco Secure Mobility Solutions) 시험은 IT인증자격증을 취득하는 시험과목입니다.어떻게 하면 난이도가 높아 도전할 자신이 없는 자격증을 한방에 취득할수 있을가요? 그 답은 Pass4Test에서 찾을볼수 있습니다. Pass4Test에서는 모든 IT인증시험에 대비한 고품질 시험공부가이드를 제공해드립니다. Pass4Test에서 연구제작한 Cisco 300-209 (Implementing Cisco Secure Mobility Solutions) 덤프로 Cisco 300-209 (Implementing Cisco Secure Mobility Solutions) 시험을 준비해보세요. 시험패스가 한결 편해집니다.
NO.1 Which of the following could be used to configure remote access VPN Host-scan and pre-login
policies?
A. ASDM
B. Connection-profile CLI command
C. Host-scan CLI command under the VPN group policy
D. Pre-login-check CLI command
Answer: A
NO.2 What is the default topology type for a GET VPN?
A. point-to-point
B. hub-and-spoke
C. full mesh
D. on-demand spoke-to-spoke
Answer: C
NO.3 Which two GDOI encryption keys are used within a GET VPN network? (Choose two.)
A. key encryption key
B. group encryption key
C. user encryption key
D. traffic encryption key
Answer: A,D
NO.4 In FlexVPN, what is the role of a NHRP resolution request?
A. It allows these entities to directly communicate without requiring traffic to use an intermediate
hop
B. It dynamically assigns VPN users to a group
C. It blocks these entities from to directly communicating with each other
D. It makes sure that each VPN spoke directly communicates with the hub
Answer: A
NO.5 Which four activities does the Key Server perform in a GETVPN deployment? (Choose four.)
A. authenticates group members
B. manages security policy
C. creates group keys
D. distributes policy/keys
E. encrypts endpoint traffic
F. receives policy/keys
G. defines group members
Answer: A,B,C,D
NO.6 A company has decided to migrate an existing IKEv1 VPN tunnel to IKEv2. Which two arevalid
configuration constructs on a Cisco IOS router? (Choose two.)
A. crypto ikev2 keyring keyring-name peer peer1 address 209.165.201.1 255.255.255.255
pre-shared-key local key1 pre-shared-key remote key2
B. crypto ikev2 transform-set transform-set-name esp-3des esp-md5-hmac esp-aes esp-sha-hmac
C. crypto ikev2 map crypto-map-name set crypto ikev2 tunnel-group tunnel-group-name set crypto
ikev2 transform-set transform-set-name
D. crypto ikev2 tunnel-group tunnel-group-name match identity remote address 209.165.201.1
authentication local pre-share authentication remote pre-share
E. crypto ikev2 profile profile-name match identity remote address 209.165.201.1 authentication
local pre-share authentication remote pre-share
Answer: A,E
NO.7 In FlexVPN, what command can an administrator use to create a virtual template interface
that can be configured and applied dynamically to create virtual access interfaces?
A. interface virtual-template number type template
B. interface virtual-template number type tunnel
C. interface template number type virtual
D. interface tunnel-template number
Answer: B
NO.8 Which two are characteristics of GETVPN? (Choose two.)
A. The IP header of the encrypted packet is preserved
B. A key server is elected among all configured Group Members
C. Unique encryption keys are computed for each Group Member
D. The same key encryption and traffic encryption keys are distributed to all Group Members
Answer: A,D