QUESTION 51 Hotspot Questions Based on the provided ASDM configuration for the remote ASA, which one of the following is correct? A.    An access-list must be configured on the outside interfaceto permit inbound VPN traffic B.    A route to 192.168.22.0/24 will not be automatically installed in the routing table C.    The ASA will use a

QUESTION 41 Guaranteed success with TestInsides practice guides 22 Cisco 300-209 : Practice Test Which NGE IKE Diffie-Hellman group identifier has the strongest cryptographic properties? A.    group 20 B.    group 24 C.    group 5 D.    group 20 Answer: D

QUESTION 31 A Cisco IOS SSL VPN gateway is configured to operate in clientless mode so that users can access file shares on a Microsoft Windows 2003 server. Which protocol is used between the Cisco IOS router and the Windows server? A.    HTTPS B.    NetBIOS C.    CIFS D.    HTTP Answer: C

QUESTION 21 Which statement is true when implementing a router with a dynamic public IP address in a crypto map based site-to-site VPN? A.    The router must be configured with a dynamic crypto map. B.    Certificates are always used for phase 1 authentication. C.    The tunnel establishment will fail if the router is configured as

QUESTION 11 A user is unable to establish an AnyConnect VPN connection to an ASA. When using the Real-Time Log viewer within ASDM to troubleshoot the issue, which two filter options would the administrator choose to show only syslog messages relevant to the VPN connection? (Choose two.) A.    Client’s public IP address B.    Client’s operating

QUESTION 1 Which two IKEv1 policy options must match on each peer when you configure an IPsec site-to-site VPN? (Choose two.) A.    priority number B.    hash algorithm C.    encryption algorithm D.    session lifetime E.    PRF algorithm Answer: BC

QUESTION 111 Which four parameters must be configured for local EAP-FAST on the controller? (Choose four.) A.    authority ID B.    authority ID Information C.    client key D.    PAC E.    server key F.    TTL for PAC G.    monitor key H.    NTP source Answer: ABEF

QUESTION 101 Which two statements best describe the LAG configuration between a Cisco WLC and a Cisco Catalyst switch? (Choose two.) A.    The Catalyst switch should be configured for PAgP. B.    The Catalyst switch should be configured only for Layer 2 load balancing. C.    The Catalyst switch should be configured for “on” mode. D.    The

QUESTION 91 Which two factors must be considered when evaluating an RF interferer for severity? (Choose two.) A.    distance from the AP B.    dBm C.    the type of security crack being used D.    duty cycle E.    number of interfering IP stations in the cell F.    duplicate SSID Answer: BD

QUESTION 81 The results of a Cisco WCS client troubleshooting tool are summarized into a simple visual representation of a four-part progression of the connection status for a wireless client. What are the four parts? (Choose four.) A.    client MAC address B.    802.11 authentication C.    IP address assignment D.    802.11 association E.    successful association F.   

QUESTION 71 When a wireless guest network is implemented using auto-anchor mobility in a controller-based wireless network, which controller is responsible for a guest client’s IP address and their security configuration? A.    any controller that supports the same VLAN B.    foreign controller C.    anchor controller D.    master controller E.    RF group master controller Answer: C

QUESTION 61 Which Cisco AnyConnect module allows troubleshooting for core AnyConnect problems? A.    telemetry B.    web security C.    VPN D.    NAM E.    DART F.    posture G.    CSSC Answer: E

QUESTION 51 In the AP Layer 3 controller discovery process, after the LWAPP Discovery Request is broadcast on a local subnet, what is the next step that the AP takes? A.    Determine whether the controller responses are the primary controller. B.    Send an LWAPP discovery request to controllers learned via OTAP if operational. C.    Send

QUESTION 41 What are three primary components that describe TKIP? (Choose three.) A.    broadcast key rotation B.    dynamic WEP C.    message integrity check D.    per-packet key hashing E.    symmetric key cipher F.    WPA2 enterprise mode Answer: ACD

QUESTION 31 Which CLI command is used on a Cisco WLC to troubleshoot mobility, rogue detection, and load- balancing events? A.    debug dot11 B.    debug capwap all C.    show dot11 details D.    show capwap details Answer: A