Breathing of 300-209 exam answers materials and discount pack for Cisco certification for customers, Real Success Guaranteed with Updated 300-209 pdf dumps vce Materials. 100% PASS Implementing Cisco Secure Mobility Solutions (SIMOS) exam Today!

Q121. Refer to the exhibit. 

Which type of VPN implementation is displayed? 

A. IKEv2 reconnect 

B. IKEv1 cluster 

C. IKEv2 load balancer 

D. IKEv1 client 

E. IPsec high availability 

F. IKEv2 backup gateway 

Answer:


Q122. Which option shows the correct traffic selectors for the child SA on the remote ASA, when the headquarter ASA initiates the tunnel? 

A. Local selector 192.168.33.0/0-192.168.33.255/65535 Remote selector 192.168.20.0/0-192.168.20.255/65535 

B. Local selector 192.168.33.0/0-192.168.33.255/65535 Remote selector 192.168.22.0/0-192.168.22.255/65535 

C. Local selector 192.168.22.0/0-192.168.22.255/65535 Remote selector 192.168.33.0/0-192.168.33.255/65535 

D. Local selector 192.168.33.0/0-192.168.33.255/65535 Remote selector 0.0.0.0/0 -0.0.0.0/65535 

E. Local selector 0.0.0.0/0 - 0.0.0.0/65535 Remote selector 192.168.22.0/0 -192.168.22.255/65535 

Answer:

Explanation: 

The traffic selector is used to determine which traffic should be protected (encrypted over the IPSec tunnel). We want this to be specific, otherwise Internet traffic will also be sent over the tunnel and most likely dropped on the remote side. Here, we just want to protect traffic from 192.168.33.0/24 (THE LOCAL SIDE) to 192.168.22.0/24 (THE REMOTE SIDE). 


Q123. The Cisco AnyConnect client fails to connect via IKEv2 but works with SSL. The following error message is displayed: 

"Login Denied, unauthorized connection mechanism, contact your administrator" 

What is the most possible cause of this problem? 

A. DAP is terminating the connection because IKEv2 is the protocol that is being used. 

B. The client endpoint does not have the correct user profile to initiate an IKEv2 connection. 

C. The AAA server that is being used does not authorize IKEv2 as the connection mechanism. 

D. The administrator is restricting access to this specific user. 

E. The IKEv2 protocol is not enabled in the group policy of the VPN headend. 

Answer:


Q124. In FlexVPN, what command can an administrator use to create a virtual template interface that can be configured and applied dynamically to create virtual access interfaces? 

A. interface virtual-template number type template 

B. interface virtual-template number type tunnel 

C. interface template number type virtual 

D. interface tunnel-template number 

Answer:

Explanation: 

Here is a reference an explanation that can be included with this test. http://www.cisco.com/en/US/docs/ios-xml/ios/sec_conn_ike2vpn/configuration/15-2mt/sec-flex-spoke.html#GUID-4A10927D-4C6A-4202-B01C-DA7E462F5D8A 

Configuring the Virtual Tunnel Interface on FlexVPN Spoke 

SUMMARY STEPS 

1. enable 

2. configure terminal 

3. interface virtual-template number type tunnel 

4. ip unnumbered tunnel number 

5. ip nhrp network-id number 

6. ip nhrp shortcut virtual-template-number 

7. ip nhrp redirect [timeout seconds] 

8. exit 


Q125. Which protocol supports high availability in a Cisco IOS SSL VPN environment? 

A. HSRP 

B. VRRP 

C. GLBP 

D. IRDP 

Answer:


Q126. Which option is most effective at preventing a remote access VPN user from bypassing the corporate transparent web proxy? 

A. using the proxy-server settings of the client computer to specify a PAC file for the client computer to download 

B. instructing users to use the corporate proxy server for all web browsing 

C. disabling split tunneling 

D. permitting local LAN access 

Answer:


Q127. Which technology can provide high availability for an SSL VPN? 

A. DMVPN 

B. a multiple-tunnel configuration 

C. a Cisco ASA pair in active/passive failover configuration 

D. certificate to tunnel group maps 

Answer: