Here you have the best Cisco 300-209 practice exam questions
Which two are characteristics of GETVPN? (Choose two.)
GETVPN (Group Encrypted Transport VPN) is a technology that provides encryption services while maintaining the original IP header of the packet. This means that the IP header is not altered during the encryption process, which allows for routing to occur transparently. Additionally, in GETVPN, the same key encryption and traffic encryption keys are distributed to all group members, ensuring that each member can decrypt the traffic encrypted by any other member within the same group. These characteristics help maintain efficient network performance and ease of configuration in a group communication context.
In the Cisco ASDM interface, where do you enable the DTLS protocol setting?
In the Cisco ASDM interface, enabling the DTLS protocol setting is done under Configuration > Remote Access VPN > Network (Client) Access > Group Policies > Add or Edit > Add or Edit Internal Group Policy. This path is where various VPN settings, including DTLS, can be configured in the ASDM interface.
What are two forms of SSL VPN? (Choose two.)
The two forms of SSL VPN are Cisco IOS WebVPN and Cisco AnyConnect. Cisco IOS WebVPN and Cisco AnyConnect are both implementations of SSL VPN technology. Port forwarding is not a form of SSL VPN; it is a method that allows external devices to communicate with a device in a local network, typically not used as a standalone SSL VPN. Full Tunnel Mode is a configuration for VPNs but does not specifically refer to a form of SSL VPN.
Which three plugins are available for clientless SSL VPN? (Choose three.)
Clientless SSL VPN typically supports plugins for protocols that facilitate remote access and management over a secure channel. CIFS (Common Internet File System) is used for file sharing, making it a common plugin for accessing network file shares. SSH (Secure Shell) provides secure command-line access to remote systems, which is essential for managing and configuring devices securely. VNC (Virtual Network Computing) allows remote control of desktop environments, which is useful for troubleshooting and administration. These three options present commonly supported services in clientless SSL VPN configurations.
Which technology can rate-limit the number of tunnels on a DMVPN hub when system utilization is above a specified percentage?
Call Admission Control (CAC) is the technology that can rate-limit the number of tunnels on a DMVPN hub when system utilization is above a specified percentage. CAC helps manage the system resources by limiting the number of simultaneous calls or tunnel establishment attempts, thereby ensuring that the system does not become overloaded and continues to perform efficiently.