Jump to content
Sadikhov IT Certification forums

Recommended Posts

The 300-209 practice dump is very useful for me, 300-209 exam braindumps are well-written by braindumpskey site. All these 300-209 exam questions are exactly what are on the test. I passed the exam this time all due to your high-quality PDF exam questions answers.These are following questions which i attempt in real exam.
 
Q: - Which encryption and authentication algorithms does Cisco recommend when deploying a Cisco NGE supported VPN solution?
A. 3DES and SHA-1
B. AES-CBC and SHA-1
C. AES-GCM and SHA-2
D. 3DES and DH
Answer: C
 
Q: - An engineer is configuring an IP VPN with IKEv2. Which two components are part of the IKEv2
proposal for this implementation? (Choose two.)
A. Tunnel mode
B. Peer name
C. Key ring
D. Encryption
E. integrity
Answer: D,E
 
Q: - Which three configuration parameters are mandatory for an IKEv2 profile? (Choose three.)
A. virtual template
B. PKI certificate authority
C. IKEv2 proposal
D. local authentication method
E. remote authentication method
F. IKEv2 policy
G. match identity or certificate
H. IKEv2 profile description
Answer: D,E,G
 
Q: - You have been using pre-shared keys for IKE authentication on your VPN. Your network has
grown rapidly, and now you need to create VPNs with numerous IPsec peers. How can you enable
scaling to numerous IPsec peers?
A. Migrate to a shared license server.
B. Migrate to external CA-based digital certificate authentication.
C. Migrate from IPsec to SSL VPN client extended authentication.
D. Migrate to a load-balancing server.
Answer: B

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×