Share some CCNP Security 300-209 exam questions and answers below.
Which three configurations are prerequisites for stateful failover for IPsec? (Choose three.)
A. Only the IKE configuration that is set up on the active device must be duplicated on the standby device; the IPsec configuration is copied automatically.
B. Only crypto map configuration that is set up on the active device must be duplicated on the standby device.
C. The IPsec configuration that is set up on the active device must be duplicated on the standby device.
D. The active and standby devices can run different versions of the Cisco IOS software but need to be the same type of device.
E. The active and standby devices must run the same version of the Cisco IOS software and should be the same type of device.
F. Only the IPsec configuration that is set up on the active device must be duplicated on the standby device; the IKE configuration is copied automatically.
G. The IKE configuration that is set up on the active device must be duplicated on the standby device.
Answer: C, E, G
Which protocol can be used for better throughput performance when using Cisco AnyConnect VPN?
A. TLSv1
B. TLSv1.1
C. TLSv1.2
D. DTLSv1
Answer: D
Which protocol must be enabled on the inside interface to use cluster encryption in SSL VPN load balancing?
A. TLS
B. DTLS
C. IKEv2
D. ISAKMP
Answer: D
Which two statements comparing ECC and RSA are true? (Choose two.)
A. ECC can have the same security as RSA but with a shorter key size.
B. ECC lags in performance when compared with RSA.
C. Key generation in ECC is slower and less CPU intensive.
D. ECC cannot have the same security as RSA, even with an increased key size.
E. Key generation in ECC is faster and less CPU intensive.
Answer: A, E
Which alogrithm is an example of asymmetric encryption?
A. RC4
B. AES
C. ECDSA
D. 3DES
Answer: C
For tomorrow's success, is right to choose Passtcert. Selecting Passtcert, you will be an IT talent.Selecting the products of Passtcert which provide the latest and the most accurate information about Cisco 300-209, your success is not far away.Through Passtcert you can get the latest Implementing Cisco Secure Mobility Solutions 300-209 training material. Please purchase it earlier, it can help you pass your first time to participate in the Cisco certification 300-209 exam.
Related article: http://70-413-update.blogspot.com/2017/08/cisco-ccnp-security-300-209-dumps-pdf.html
No comments:
Post a Comment