!!!August 2016 Cisco Official News!!!
CCNP Security 300-209 SIMOS: Implementing Cisco Secure Mobility Solutions (SIMOS) Exam Questions Updated Today!
Instant Free Download 300-209 SIMOS PDF & 300-209 SIMOS VCE Dumps from Braindump2go.com!
100% Pass Guaranteed!
100% Real Exam Questions!
NEW QUESTION 61 – NEW QUESTION 70:
1.|2016/08 Latest 300-209 SIMOS PDF & 300-209 SIMOS VCE 237Q&As: http://www.braindump2go.com/300-209.html
2.|2016/08 Latest 300-209 SIMOS SISAS Exam Questions PDF: https://drive.google.com/folderview?id=0B272WrTALRHcRmVtQ29JNWk3Nzg&usp=sharing
QUESTION 61
In FlexVPN, what command can an administrator use to create a virtual template interface that can be configured and applied dynamically to create virtual access interfaces?
A. interface virtual-template number type template
B. interface virtual-template number type tunnel
C. interface template number type virtual
D. interface tunnel-template number
Answer: B
QUESTION 62
In FlexVPN, what is the role of a NHRP resolution request?
A. It allows these entities to directly communicate without requiring traffic to use an intermediate hop
B. It dynamically assigns VPN users to a group
C. It blocks these entities from to directly communicating with each other
D. It makes sure that each VPN spoke directly communicates with the hub
Answer: A
QUESTION 63
What are three benefits of deploying a GET VPN? (Choose three.)
A. It provides highly scalable point-to-point topologies.
B. It allows replication of packets after encryption.
C. It is suited for enterprises running over a DMVPN network.
D. It preserves original source and destination IP address information.
E. It simplifies encryption management through use of group keying.
F. It supports non-IP protocols.
Answer: BDE
QUESTION 64
What is the default topology type for a GET VPN?
A. point-to-point
B. hub-and-spoke
C. full mesh
D. on-demand spoke-to-spoke
Answer: C
QUESTION 65
Which two GDOI encryption keys are used within a GET VPN network? (Choose two.)
A. key encryption key
B. group encryption key
C. user encryption key
D. traffic encryption key
Answer: AD
QUESTION 66
What are the three primary components of a GET VPN network? (Choose three.)
A. Group Domain of Interpretation protocol
B. Simple Network Management Protocol
C. server load balancer
D. accounting server
E. group member
F. key server
Answer: AEF
QUESTION 67
Refer to the exhibit. After the configuration is performed, which combination of devices can connect?
A. a device with an identity type of IPv4 address of 209.165.200.225 or 209.165.202.155 or a
certificate with subject name of “cisco.com”
B. a device with an identity type of IPv4 address of both 209.165.200.225 and
209.165.202.155 or a certificate with subject name containing “cisco.com”
C. a device with an identity type of IPv4 address of both 209.165.200.225 and 209.165.202.155 and
a certificate with subject name containing “cisco.com”
D. a device with an identity type of IPv4 address of 209.165.200.225 or 209.165.202.155 or a certificate
with subject name containing “cisco.com”
Answer: D
QUESTION 68
Which three settings are required for crypto map configuration? (Choose three.)
A. match address
B. set peer
C. set transform-set
D. set security-association lifetime
E. set security-association level per-host
F. set pfs
Answer: ABC
QUESTION 69
A network is configured to allow clientless access to resources inside the network. Which feature must be enabled and configured to allow SSH applications to respond on the specified port 8889?
A. auto applet download
B. port forwarding
C. web-type ACL
D. HTTP proxy
Answer: B
QUESTION 70
Consider this scenario. When users attempt to connect via a Cisco AnyConnect VPN session, the certificate has changed and the connection fails.
What is a possible cause of the connection failure?
A. An invalid modulus was used to generate the initial key.
B. The VPN is using an expired certificate.
C. The Cisco ASA appliance was reloaded.
D. The Trusted Root Store is configured incorrectly.
Answer: C
!!!RECOMMEND!!!
Braindump2go 2016/08 New Cisco 300-209 SIMOS Exam VCE and PDF 237Q&As Dumps Download:
http://www.braindump2go.com/300-209.html [100% 300-209 Exam Pass Promised!]
2016/08 Cisco 300-209 SIMOS New Questions and Answers PDF:
https://drive.google.com/folderview?id=0B272WrTALRHcRmVtQ29JNWk3Nzg&usp=sharing