- All Exams Instant Download
After the configuration is performed, which combination of devices can connect?
Refer to the exhibit. After the configuration is performed, which combination of devices can connect?A . a device with an identity type of IPv4 address of 209.165.200.225 or 209.165.202.155 or a certificate with subject name of "cisco.com"B . a device with an identity type of IPv4 address of both 209.165.200.225...
An administrator wishes to limit the networks reachable over the Anyconnect VPN tunnels. Which configuration on the ASA will correctly limit the networks reachable to 209.165.201.0/27 and 209.165.202.128/27?
An administrator wishes to limit the networks reachable over the Anyconnect VPN tunnels. Which configuration on the ASA will correctly limit the networks reachable to 209.165.201.0/27 and 209.165.202.128/27?A . access-list splitlist standard permit 209.165.201.0 255.255.255.224 access-list splitlist standard permit 209.165.202.128 255.255.255.224 ! group-policy GroupPolicy1 internal group-policy GroupPolicy1 attributes split-tunnel-policy tunnelspecified...
Which IKEv2 feature minimizes the configuration of a FlexVPN on Cisco IOS devices?
Which IKEv2 feature minimizes the configuration of a FlexVPN on Cisco IOS devices?A . IKEv2 Suite-BB . IKEv2 proposalsC . IKEv2 profilesD . IKEv2 Smart DefaultsView AnswerAnswer: D
Which technology can rate-limit the number of tunnels on a DMVPN hub when system utilization is above a specified percentage?
Which technology can rate-limit the number of tunnels on a DMVPN hub when system utilization is above a specified percentage?A . NHRP Event PublisherB . interface state controlC . CACD . NHRP AuthenticationE . ip nhrp connectView AnswerAnswer: C
When you configure IPsec VPN High Availability Enhancements, which technology does Cisco recommend that you enable to make reconvergence faster?
When you configure IPsec VPN High Availability Enhancements, which technology does Cisco recommend that you enable to make reconvergence faster?A . EOTB . IP SLAsC . periodic IKE keepalivesD . VPN fast detectionView AnswerAnswer: C
You are configuring a Cisco IOS SSL VPN gateway to operate with DVTI support. Which command must you configure on the virtual template?
You are configuring a Cisco IOS SSL VPN gateway to operate with DVTI support. Which command must you configure on the virtual template?A . tunnel protection ipsecB . ip virtual-reassemblyC . tunnel mode ipsecD . ip unnumberedView AnswerAnswer: D
Which three plugins are available for clientless SSL VPN? (Choose three.)
Which three plugins are available for clientless SSL VPN? (Choose three.)A . CIFSB . RDP2C . SSHD . VNCE . SQLNETF . ICMPView AnswerAnswer: B, C, D
A rogue static route is installed in the routing table of a Cisco FlexVPN and is causing traffic to be blackholed. Which command should be used to identify the peer from which that route originated?
A rogue static route is installed in the routing table of a Cisco FlexVPN and is causing traffic to be blackholed. Which command should be used to identify the peer from which that route originated?A . show crypto ikev2 sa detailB . show crypto routeC . show crypto ikev2 client...
Which two statements are true when designing a SSL VPN solution using Cisco AnyConnect? (Choose two.)
Which two statements are true when designing a SSL VPN solution using Cisco AnyConnect? (Choose two.)A . The VPN server must have a self-signed certificate.B . A SSL group pre-shared key must be configured on the server.C . Server side certificate is optional if using AAA for client authentication.D ....
A company needs to provide secure access to its remote workforce. The end users use public kiosk computers and a wide range of devices. They will be accessing only an internal web application. Which VPN solution satisfies these requirements?
A company needs to provide secure access to its remote workforce. The end users use public kiosk computers and a wide range of devices. They will be accessing only an internal web application. Which VPN solution satisfies these requirements?A . Clientless SSLVPNB . AnyConnect Client using SSLVPNC . AnyConnect Client...
