- All Exams Instant Download
Which result of this command is true?
Refer to the Exhibit: Which result of this command is true?A . It displays the RSA public keys of the rooterB . Makes the router generate a certificate signing requestC . It Specifies self-signed enrollment for a trust pointD . Generates an RSA key called TRIAL FOURView AnswerAnswer: C
Which two features are available in the Plus license for Cisco AnyConnect? (Choose two.)
Which two features are available in the Plus license for Cisco AnyConnect? (Choose two.)A . Suite B cryptographyB . IPsec IKEv2C . Clientless SSL VPND . Network Access ManagerE . posture servicesView AnswerAnswer: D,E
Which cryptographic algorithm is used for data integrity?
Which cryptographic algorithm is used for data integrity?A . SHA-256B . ECDH-384C . ECDSA-256D . RSA-3072View AnswerAnswer: A
Which statement is true?
An engineer is defining ECC variables and has set the input_mode set to B. Which statement is true?A . DTMF voice is acceptedB . Get Digits are written to the CEDC . Mixed mode input is not acceptedD . An ASR is not being usedView AnswerAnswer: C
Which type of failover has been implemented?
A customer has two ASAs configured in high availability and is experiencing connection drops that require re-establishment each time failover occurs. Which type of failover has been implemented?A . StatelessB . routedC . transparentD . statefulView AnswerAnswer: D
Which method dynamically advertises the network routes for remote tunnel endpoints?
Which method dynamically advertises the network routes for remote tunnel endpoints?A . dynamic routingB . RRIC . policy-based routingD . CEFView AnswerAnswer: B Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnav/configuration/124t/sec-vpnavailability-12-4t-book/sec-rev-rte-inject.html
Where must an engineer configure a preshared key for site-to-site VPN tunnel configured on a Cisco ASA?
Where must an engineer configure a preshared key for site-to-site VPN tunnel configured on a Cisco ASA?A . crypto mapB . group policyC . tunnel groupD . isakmp policyView AnswerAnswer: C
Which two attributes can be matched from the identity of the remote peer when using IKEv2 Name Manager? (Choose two.)
Which two attributes can be matched from the identity of the remote peer when using IKEv2 Name Manager? (Choose two.)A . fqdnB . hostnameC . IP addressD . kerberosView AnswerAnswer: A,B
Which two IKV1 parameter must match on both peers?
An engineer is configuring a site-t-site VPM tunnel. Which two IKV1 parameter must match on both peers? (Choose two.A . encryption algorithmB . access listsC . encryption domainsD . QoSE . hashing methodView AnswerAnswer: A,E
From the CLI of a Cisco ASA 5520, which command shows specific information about current clientless and Cisco Anyconnect SSL VPN users only?
From the CLI of a Cisco ASA 5520, which command shows specific information about current clientless and Cisco Anyconnect SSL VPN users only?A . show crypto ikve1 sa detailB . show vpn-sessiondb remoteC . show vpn-sessiondbD . show von-sessiondb detailView AnswerAnswer: D
