Cisco 300-209 - Implementing Cisco Secure Mobility Solutions Exam
Page: 1 / 6
Total 26 questions
Question #1 (Topic: )
When Cisco ASA applies VPN permissions, what is the first set of attributes that it applies?
A. dynamic access policy attributes
B. group policy attributes
C. connection profile attributes
D. user attributes
Answer: A
Question #2 (Topic: )
Which of the following could be used to configure remote access VPN Host-scan and pre-
login policies?
login policies?
A. ASDM
B. Connection-profile CLI command
C. Host-scan CLI command under the VPN group policy
D. Pre-login-check CLI command
Answer: A
Question #3 (Topic: )
Which two RADIUS attributes are needed for a VRF-aware FlexVPN hub? (Choose two.)
A. ip:interface-config=ip unnumbered loobackn
B. ip:interface-config=ip vrf forwarding ivrf
C. ip:interface-config=ip src route
D. ip:interface-config=ip next hop
E. ip:interface-config=ip neighbor 0.0.0.0
Answer: A,B
Question #4 (Topic: )
Which type of NHRP packet is unique to Phase 3 DMVPN topologies?
A. resolution request
B. resolution reply
C. redirect
D. registration request
E. registration reply
F. error indication
Answer: C
Question #5 (Topic: )
When using clientless SSL VPN, you might not want some applications or web resources
to go through the Cisco ASA appliance. For these application and web resources, as a
Cisco ASA administrator, which configuration should you use?
to go through the Cisco ASA appliance. For these application and web resources, as a
Cisco ASA administrator, which configuration should you use?
A. Configure the Cisco ASA appliance for split tunneling.
B. Configure network access exceptions in the SSL VPN customization editor.
C. Configure the Cisco ASA appliance to disable content rewriting.
D. Configure the Cisco ASA appliance to enable URL Entry bypass.
E. Configure smart tunnel to bypass the Cisco ASA appliance proxy function.
Answer: C
