- All Exams Instant Download
Which benefit of FlexVPN is a limitation of DMVPN using IKEv1?
Which benefit of FlexVPN is a limitation of DMVPN using IKEv1?A . GRE encapsulation allows for forwarding of non-IP traffic. B. IKE implementation can install routes in routing table. C. NHRP authentication provides enhanced security. D. Dynamic routing protocols can be configured.View AnswerAnswer: B
Based on the debug output, which type of mismatch is preventing the VPN from coming up?
Refer to the exhibit. Based on the debug output, which type of mismatch is preventing the VPN from coming up?A . interesting traffic B. lifetime C. preshared key D. PFSView AnswerAnswer: A Explanation: The first of the two TS payloads is known as TSi (Traffic Selector- initiator). The second is...
Which feature allows the ASA to handle nonstandard applications and web resources so that they display correctly over a clientless SSL VPN connection?
Which feature allows the ASA to handle nonstandard applications and web resources so that they display correctly over a clientless SSL VPN connection?A . single sign-on B. Smart Tunnel C. WebType ACL D. plug-insView AnswerAnswer: B Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/vpn_clientless_ssl.html#29951
Which type of traffic is being blocked?
Refer to the exhibit. An engineer is troubleshooting a new GRE over IPsec tunnel. The tunnel is established but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked?A . ESP packets from spoke2 to spoke1 B. ISAKMP packets from spoke2 to spoke1...
Why does this failure occur?
An engineer is troubleshooting a new DMVPN setup on a Cisco IOS router. After the show crypto isakmp sa command is issued, a response is returned of "MM_NO_STATE." Why does this failure occur?A . The ISAKMP policy priority values are invalid. B. ESP traffic is being dropped. C. The Phase...
Which two changes must be made in order to migrate from DMVPN Phase 2 to Phase 3 when EIGRP is configured? (Choose two.)
Which two changes must be made in order to migrate from DMVPN Phase 2 to Phase 3 when EIGRP is configured? (Choose two.)A . Add NHRP shortcuts on the hub. B. Add NHRP redirects on the spoke. C. Disable EIGRP next-hop-self on the hub. D. Enable EIGRP next-hop-self on the...
What might be the problem?
Cisco AnyConnect Secure Mobility Client has been configured to use IKEv2 for one group of users and SSL for another group. When the administrator configures a new AnyConnect release on the Cisco ASA, the IKEv2 users cannot download it automatically when they connect. What might be the problem?A . The...
Which two features provide headend resiliency for Cisco AnyConnect clients? (Choose two.)
Which two features provide headend resiliency for Cisco AnyConnect clients? (Choose two.)A . AnyConnect Auto Reconnect B. AnyConnect Network Access Manager C. AnyConnect Backup Servers D. ASA failover E. AnyConnect Always OnView AnswerAnswer: A,E Explanation: The two features that provide headend resiliency for Cisco AnyConnect clients are AnyConnect Auto Reconnect...
Which VPN does VPN load balancing on the ASA support?
Which VPN does VPN load balancing on the ASA support?A . VTI B. IPsec site-to-site tunnels C. L2TP over IPsec D. Cisco AnyConnectView AnswerAnswer: D
Which feature can update the client to meet an enterprise security policy?
A Cisco AnyConnect client establishes a SSL VPN connection with an ASA at the corporate office. An engineer must ensure that the client computer meets the enterprise security policy. Which feature can update the client to meet an enterprise security policy?A . Endpoint Assessment B. Cisco Secure Desktop C. Basic...
