← Back to exam page

300-209 – CCNP Security Implementing Cisco Secure Mobility Solutions (SIMOS)

Loading demo links...

Showing 10–12 of 20 questions

Question 10

Which three configurations are required for both IPsec VTI and crypto map-based VPNs?

(Choose three.)

Select all that apply, then click Submit answer.

  • ○

    transform set
  • ○

    ISAKMP policy
  • ○

    ACL that defines traffic to encrypt
  • ○

    dynamic routing protocol
  • ○

    tunnel interface
  • ○

    IPsec profile
  • ○

    PSK or PKI trustpoint with certificate
Question 11

Which two examples of transform sets are contained in the IKEv2 default proposal? (Choose two.)

Select all that apply, then click Submit answer.

  • ○

    aes-cbc-192, sha256, 14
  • ○

    3des, md5, 5
  • ○

    3des, sha1, 1
  • ○

    aes-cbc-128, sha, 5
Question 12

In which situation would you enable the Smart Tunnel option with clientless SSL VPN?

Select an option, then click Submit answer.

  • ○

    when a user is using an outdated version of a web browser
  • ○

    when an application is failing in the rewrite process
  • ○

    when IPsec should be used over SSL VPN
  • ○

    when a user has a nonsupported Java version installed
  • ○

    when cookies are disabled