QUESTION NO: 1
An administrator is setting up Cisco AnyConnect on a Cisco ASA with the requirement that AnyConnect automatically establishes a VPN when a company-owned laptop is connected to the internet outside of the corporate network. Which configuration meets these requirements?
An administrator is setting up Cisco AnyConnect on a Cisco ASA with the requirement that AnyConnect automatically establishes a VPN when a company-owned laptop is connected to the internet outside of the corporate network. Which configuration meets these requirements?
Correct Answer: D
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 2
Cisco AnyConnect Secure Mobility Client has been configured to use IKEv2 for one group of users and SSL for another group. When the administrator configures a new AnyConnect release on the Cisco ASA, the IKEv2 users cannot download it automatically when they connect. What might be the problem?
Cisco AnyConnect Secure Mobility Client has been configured to use IKEv2 for one group of users and SSL for another group. When the administrator configures a new AnyConnect release on the Cisco ASA, the IKEv2 users cannot download it automatically when they connect. What might be the problem?
Correct Answer: B
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 3
What are the two AAA methods for user authentication when configuring the IKEv2 profile?
(Choose two.)
What are the two AAA methods for user authentication when configuring the IKEv2 profile?
(Choose two.)
Correct Answer: A,B
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 4
An engineer is creating an URL object on Cisco FMC. How must it be configured so that the object will match for HTTPS traffic in an access control policy?
An engineer is creating an URL object on Cisco FMC. How must it be configured so that the object will match for HTTPS traffic in an access control policy?
Correct Answer: D
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 5
Which two RADIUS attributes are supported by IKEv2 FlexVPN server? (Choose two.)
Which two RADIUS attributes are supported by IKEv2 FlexVPN server? (Choose two.)
Correct Answer: D,E
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 6
Which problem is solved by enabling IKEv2 fragmentation on a VPN headend?
Which problem is solved by enabling IKEv2 fragmentation on a VPN headend?
Correct Answer: A
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 7
Refer to the exhibit. An engineer configures Clientless SSL VPN on a Cisco ASA. After the configuration, a user receives this error message in the browser during attempt to connect:
Secure Client is not enabled on the VPN server.
Which action must the engineer take to resolve the issue?
Refer to the exhibit. An engineer configures Clientless SSL VPN on a Cisco ASA. After the configuration, a user receives this error message in the browser during attempt to connect:
Secure Client is not enabled on the VPN server.
Which action must the engineer take to resolve the issue?
Correct Answer: D
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 8
A company is setting up a dynamic crypto map on the Cisco ASA at the headquarters to accept connections from the branch offices. There will be no IP subnet overlap between the branch offices, but the engineer does not know which encryption domains will be requested by the branch offices. Additionally, the company security policy states that routing protocol traffic should not leave the HQ network. Which solution should be used to route traffic back to the branches from the Cisco ASA with minimal administrative effort?
A company is setting up a dynamic crypto map on the Cisco ASA at the headquarters to accept connections from the branch offices. There will be no IP subnet overlap between the branch offices, but the engineer does not know which encryption domains will be requested by the branch offices. Additionally, the company security policy states that routing protocol traffic should not leave the HQ network. Which solution should be used to route traffic back to the branches from the Cisco ASA with minimal administrative effort?
Correct Answer: B
Vote an answer
QUESTION NO: 9
Refer to the exhibit. An engineer must configure a FlexVPN site-to-site GRE tunnel that uses IPsec between two Cisco routers. The indicated configuration was applied on Router_A, but the tunnel fails to come up. Which IP address must be set on Router_A to resolve the issue?
Refer to the exhibit. An engineer must configure a FlexVPN site-to-site GRE tunnel that uses IPsec between two Cisco routers. The indicated configuration was applied on Router_A, but the tunnel fails to come up. Which IP address must be set on Router_A to resolve the issue?
Correct Answer: D
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).