Cisco 300-209 Exam Questions

Question 6 of 280

Refer to the exhibit.
Exam 300-209: Question 6 - Image 1

After the configuration is performed, which combination of devices can connect?

a device with an identity type of IPv4 address of 209.165.200.225 or 209.165.202.155 or a certificate with subject name of "cisco.com"

a device with an identity type of IPv4 address of both 209.165.200.225 and 209.165.202.155 or a certificate with subject name containing "cisco.com"

a device with an identity type of IPv4 address of both 209.165.200.225 and 209.165.202.155 and a certificate with subject name containing "cisco.com"

a device with an identity type of IPv4 address of 209.165.200.225 or 209.165.202.155 or a certificate with subject name containing "cisco.com"

Correct Answer: D

Question 7 of 280

Which three settings are required for crypto map configuration? (Choose three.)

match address

set peer

set transform-set

set security-association lifetime

set security-association level per-host

set pfs

Correct Answer: A, B, C

Question 8 of 280

A network is configured to allow clientless access to resources inside the network. Which feature must be enabled and configured to allow SSH applications to respond on the specified port 8889?

auto applet download

port forwarding

web-type ACL

HTTP proxy

Correct Answer: B

Question 9 of 280

In the Cisco ASDM interface, where do you enable the DTLS protocol setting?

Configuration > Remote Access VPN > Network (Client) Access > Group Policies > Add or Edit > Add or Edit Internal Group Policy

Configuration > Remote Access VPN > Network (Client) Access > AAA Setup > Local Users > Add or Edit

Device Management > Users/AAA > User Accounts > Add or Edit > Add or Edit User Account > VPN Policy > SSL VPN Client

Configuration > Remote Access VPN > Network (Client) Access > Group Policies > Add or Edit

Correct Answer: A

In the Cisco ASDM interface, enabling the DTLS protocol setting is done under Configuration > Remote Access VPN > Network (Client) Access > Group Policies > Add or Edit > Add or Edit Internal Group Policy. This path is where various VPN settings, including DTLS, can be configured in the ASDM interface.

Question 10 of 280

What are two forms of SSL VPN? (Choose two.)

port forwarding

Full Tunnel Mode

Cisco IOS WebVPN

Cisco AnyConnect

Correct Answer: C, D

The two forms of SSL VPN are Cisco IOS WebVPN and Cisco AnyConnect. Cisco IOS WebVPN and Cisco AnyConnect are both implementations of SSL VPN technology. Port forwarding is not a form of SSL VPN; it is a method that allows external devices to communicate with a device in a local network, typically not used as a standalone SSL VPN. Full Tunnel Mode is a configuration for VPNs but does not specifically refer to a form of SSL VPN.