Free Cisco 300-209 Exam Dumps Questions & Answers

Refer to the exhibit.

A network security engineer is troubleshooting intermittent connectivity issues across a tunnel. Based on the output from the show crypto ipsec sa command, which cause is most likely?

• A.  Traffic may flow in only one direction across this tunnel
• B.  ISAKMP and/or IPsec may be bouncing up and down
• C.  The security association lifetimes are set to default values.
• D.  Return traffic is not coming back from the other end of the tunnel

While attempting to establish a site-to-site VPN, the engineer notices that phase 1 of the VPN tunnel fails. The engineer wants to run a capture to confirm that the outside interface is receiving phase1 information from the third party peer address. Which command must be run on the ASA to verify this information?

• A.  Capture capin interface outside match udp any eq 123 any eq 123
• B.  Capture capin interface outside match gre any any
• C.  Capture capin interface outside match udp any eq 500 any eq 500
• D.  Capture capin interface outside match ah any any
• E.  Capture capin interface outside match ipsec any any

Drag and drop the debug messages on the left onto the associated function during trouble shooting on the right.

Correct Answer:

Which algorithm is an example of encryption?

• A.  RSA
• B.  3DES
• C.  AES
• D.  RC4

Which statement about the local and remote methods in an IKEv2 authentication exchange is true?

• A.  They must be the same
• B.  There must be one local and two remote methods
• C.  They may be the same or different
• D.  They must be different