Which statement about the hub in a DMVPN configuration …

Jan/6th/2018 New Updated Cisco 300-209 Questions:

QUESTION
Which option describes what address preservation with IPsec Tunnel Mode allows when GETVPN is used?

A. stronger encryption methods
B. Network Address Translation of encrypted traffic
C. traffic management based on original source and destination addresses
D. Tunnel Endpoint Discovery

Answer: C

QUESTION
Which feature is available in IKEv1 but not IKEv2?

A. Layer 3 roaming
B. aggressive mode
C. EAP variants
D. sequencing

Answer: B

QUESTION
Which feature is enabled by the use of NHRP in a DMVPN network?

A. host routing with Reverse Route Injection
B. BGP multiaccess
C. host to NBMA resolution
D. EIGRP redistribution

Answer: C

QUESTION
Which statement about the hub in a DMVPN configuration with iBGP is true?

A. It must be a route reflector client.
B. It must redistribute EIGRP from the spokes.
C. It must be in a different AS.
D. It must be a route reflector.

Answer: D

QUESTION
Refer to the exhibit. Which technology is represented by this configuration?

A. AAA for FlexVPN
B. AAA for EzVPN
C. TACACS+ command authorization
D. local command authorization

Answer: A

QUESTION
Which command can you use to monitor the phase 1 establishment of a FlexVPN tunnel?

A. show crypto ipsec sa
B. show crypto isakmp sa
C. show crypto ikev2 sa
D. show ip nhrp

Answer: C

QUESTION 167
Which interface is managed by the VPN Access Interface field in the Cisco ASDM IPsec Site-to- Site VPN Wizard?

A. the local interface named “VPN_access”
B. the local interface configured with crypto enable
C. the local interface from which traffic originates
D. the remote interface with security level 0

Answer: B

QUESTION 168
You are troubleshooting a DMVPN NHRP registration failure. Which command can you use to view request counters?

A. show ip nhrp nhs detail
B. show ip nhrp tunnel
C. show ip nhrp incomplete
D. show ip nhrp incomplete tunnel tunnel_interface_number

Answer: A

QUESTION 169
Refer to the exhibit. What is the purpose of the given configuration?

A. Establishing a GRE tunnel.
B. Enabling IPSec to decrypt fragmented packets.
C. Resolving access issues caused by large packet sizes.
D. Adding the spoke to the routing table.

Answer: C

QUESTION 170
Which three commands are included in the command show dmvpn detail? (Choose three.)

A. show ip nhrp nhs
B. show dmvpn
C. show crypto session detail
D. show crypto ipsec sa detail
E. show crypto sockets
F. show ip nhrp

Answer: ABC

QUESTION 171
Refer to the exhibit. Which action is demonstrated by this debug output?

A. NHRP initial registration by a spoke.
B. NHRP registration acknowledgement by the hub.
C. Disabling of the DMVPN tunnel interface.
D. IPsec ISAKMP phase 1 negotiation.

Answer: A