This page was exported from Exam PDF Free Instant Download From Lead2pass [ http://www.testbraindumps.net ] Export date:Mon Sep 23 12:11:06 2019 / +0000 GMT ___________________________________________________ Title: [February 2018] Lead2pass 300-209 New Questions Free Download 319q --------------------------------------------------- Lead2pass Cisco 300-209 VCE And PDF Instant Download: https://www.lead2pass.com/300-209.html QUESTION 11A user is unable to establish an AnyConnect VPN connection to an ASA. When using the Real-Time Log viewer within ASDM to troubleshoot the issue, which two filter options would the administrator choose to show only syslog messages relevant to the VPN connection? (Choose two.) A.    Client's public IP addressB.    Client's operating systemC.    Client's default gateway IP addressD.    Client's usernameE.    ASA's public IP addressAnswer: AD QUESTION 12Which Cisco ASDM option configures forwarding syslog messages to email? A.    Configuration > Device Management > Logging > E-Mail SetupB.    Configuration > Device Management > E-Mail Setup > Logging EnableC.    Select the syslogs to email, click Edit, and select the Forward Messages option.D.    Select the syslogs to email, click Settings, and specify the Destination Email Address option. Answer: A QUESTION 13Which Cisco ASDM option configures WebVPN access on a Cisco ASA? A.    Configuration > WebVPN > WebVPN AccessB.    Configuration > Remote Access VPN > Clientless SSL VPN AccessC.    Configuration > WebVPN > WebVPN ConfigD.    Configuration > VPN > WebVPN Access Answer: B QUESTION 14A user with IP address 10.10.10.10 is unable to access a HTTP website at IP address209.165.200.225 through a Cisco ASA. Which two features and commands will helptroubleshoot the issue? (Choose two.) A.    Capture user traffic using command capture capin interface inside match ip host10.10.10.10 anyB.    After verifying that user traffic reaches the firewall using syslogs or captures, use packet tracer command packet-tracer input inside tcp 10.10.10.10 1234 209.165.200.225 80C.    Enable logging at level 1 and check the syslogs using commands logging enable, logging buffered 1 and show logging | include 10.10.10.10D.    Check if an access-list on the firewall is blocking the user by using command show running-config access-list | include 10.10.10.10E.     Use packet tracer command packet-tracer input inside udp 0.10.10.10 1234192.168.1.3 161 to see what the firewall is doing with the user's traffic Answer: AB QUESTION 15A Cisco router may have a fan issue that could increase its temperature and trigger a failure. What troubleshooting steps would verify the issue without causing additional risks? A.    Configure logging using commands "logging on", "logging buffered 4", and check for fan failure logs using "show logging"B.    Configure logging using commands "logging on", "logging buffered 6", and check for fan failure logs using "show logging"C.    Configure logging using commands "logging on", "logging discriminator msglog1 console 7", and check for fan failure logs using "show logging"D.    Configure logging using commands "logging host 10.11.10.11", "logging trap 2", and check for fan failurelogs at the syslog server 10.11.10.11 Answer: A QUESTION 16Which of these are the two types of keys used when implementing GET VPN? (Choose two) A.    key encryptionB.    group encryptionC.    pre-shared keyD.    public keyE.    private keyF.    traffic encryption key Answer: AF QUESTION 17A private wan connection is suspected of intermittently corrupting data. Which technology can a network administrator use to detect and drop the altered data traffic? A.    AES-128B.    RSA CertificatesC.    SHA2-HMACD.    3DESE.    Diffie-Helman Key Generation Answer: C QUESTION 18A company needs to provide secure access to its remote workforce. The end users usepublic kiosk computers and a wide range of devices. They will be accessing only an internal web application. Which VPN solution satisfies these requirements? A.    Clientless SSLVPNB.    AnyConnect Client using SSLVPNC.    AnyConnect Client using IKEv2D.    FlexVPN ClientE.    Windows built-in PPTP client Answer: A QUESTION 19A network administrator is configuring AES encryption for the ISAKMP policy on an IOS router. Which two configurations are valid? (Choose two.) A.    crypto isakmp policy 10encryption aes 254B.    crypto isakmp policy 10encryption aes 192C.    crypto isakmp policy 10encryption aes 256D.    crypto isakmp policy 10encryption aes 196E.    crypto isakmp policy 10encryption aes 198F.    crypto isakmp policy 10encryption aes 64 Answer: BC QUESTION 20Which two qualify as Next Generation Encryption integrity algorithms? (Choose two.) A.    SHA-512B.    SHA-256C.    SHA-192D.    SHA-380E.    SHA-192F.    SHA-196 Answer: AB 300-209 dumps full version (PDF&VCE): https://www.lead2pass.com/300-209.html Large amount of free 300-209 exam questions on Google Drive: https://drive.google.com/open?id=0B3Syig5i8gpDYnF5Vk16OS1tc1E You may also need: 300-206 exam dumps: https://drive.google.com/open?id=0B3Syig5i8gpDQ0xqNGttYzZGYk0 300-208 exam dumps: https://drive.google.com/open?id=0B3Syig5i8gpDMXlWOHdFVkZmREU 300-210 exam dumps: https://drive.google.com/open?id=0B3Syig5i8gpDRF9kSExjc1FqREU --------------------------------------------------- Images: --------------------------------------------------- --------------------------------------------------- Post date: 2018-02-24 06:05:31 Post date GMT: 2018-02-24 06:05:31 Post modified date: 2018-02-24 06:05:31 Post modified date GMT: 2018-02-24 06:05:31 ____________________________________________________________________________________________ Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com