Online Access Free 300-209 Practice Test

A company wants to validate hosts before allowing them on the network via remote access VPN.
Which Dynamic Access Policies (DAP) method provides additional host level validation?

• A.Folder check
• B.File check
• C.Hostname check
• D.TACACS check

You are designing a remote VPN solution that will use the Cisco AnyConnect client. By default, which type of traffic should you enable on the perimeter firewall to allow users to initiate sessions from the LAN to an external Cisco ASA?

• A.TCP port 443 in TLS mode
• B.TCP port 8443 in DTLS mode
• C.UDP ports 500 and 4500
• D.UDP port 848 in DTLS mode

An internet-based VPN solution is being considered to replace an existing private WAN connecting remote office. A multimedia application is used that relies on multiple for communication. Which two VPN solutions meet the application's network requirement? (Choose two.)

• A.Group Encrypted Transport VPN
• B.Crypto-map based site-to-site IPsec VPNs
• C.DMVPN
• D.AnyConnect VPN
• E.FlexVPN

Which option is one of the differences between FlexVPN and DMVPN?

• A.FlexVPN uses IKEV2 and DMVPN can use IKEv1 or IKEv2.
• B.DMVPN can use IKEv1and IKEv2 where FlexVPNpnly Uses IKEv1
• C.DMVPN uses IKEv1 and FlexVPN use IKEv3.
• D.FlexVPN can use IKEv1 and IKEv2 where DMVPN uses only IKEv2.

An engineer must set up a site-to site VPN implementation with an any-to-any topology that provides secure routing across the router backbone. Which VPN technology allows a shared IPSec SA to be used?

• A.IPsec VPN
• B.DMVPN
• C.GET VPN
• D.FlexVPN