- All Exams Instant Download
Which spoke configuration mitigates tunnel drops?
Refer to the exhibit. The DMVPN tunnel is dropping randomly and no tunnel protection is configured. Which spoke configuration mitigates tunnel drops? A) B) C) D) A . Option AB . Option BC . Option CD . Option DView AnswerAnswer: D
What is configured as a result of this command set?
Refer to the exhibit. What is configured as a result of this command set?A . FlexVPN client profile for IPv6B . FlexVPN server to authorize groups by using an IPv6 external AAAC . FlexVPN server for an IPv6 dVTI sessionD . FlexVPN server to authenticate IPv6 peers by using EAPView...
Based on the exhibit, why are users unable to access CCNP Webserver bookmark?
Refer to the exhibit. Based on the exhibit, why are users unable to access CCNP Webserver bookmark?A . The URL is being blocked by a WebACC . The ASA cannot resolve the URE . The bookmark has been disabled.F . The user cannot access the URView AnswerAnswer: C
On a FlexVPN hub-and-spoke topology where spoke-to-spoke tunnels are not allowed, which command is needed for the hub to be able to terminate FlexVPN tunnels?
On a FlexVPN hub-and-spoke topology where spoke-to-spoke tunnels are not allowed, which command is needed for the hub to be able to terminate FlexVPN tunnels?A . interface virtual-accessB . ip nhrp redirectC . interface tunnelD . interface virtual-templateView AnswerAnswer: D
Which feature allows the ASA to handle nonstandard applications and web resources so that they display correctly over a clientless SSL VPN connection?
Which feature allows the ASA to handle nonstandard applications and web resources so that they display correctly over a clientless SSL VPN connection?A . single sign-onB . Smart TunnelC . WebType ACLD . plug-insView AnswerAnswer: B Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/vpn_clientless_ssl.html#29951
Which configuration construct must be used in a FlexVPN tunnel?
Which configuration construct must be used in a FlexVPN tunnel?A . EAP configurationB . multipoint GRE tunnel interfaceC . IKEv1 policyD . IKEv2 profileView AnswerAnswer: D
Drag and drop the correct commands from the night onto the blanks within the code on the left to implement a design that allow for dynamic spoke-to-spoke communication. Not all comments are used
DRAG DROP Drag and drop the correct commands from the night onto the blanks within the code on the left to implement a design that allow for dynamic spoke-to-spoke communication. Not all comments are used. View AnswerAnswer:
Which statement about GETVPN is true?
Which statement about GETVPN is true?A . The configuration that defines which traffic to encrypt originates from the key server.B . TEK rekeys can be load-balanced between two key servers operating in COOD . The pseudo time that is used for replay checking is synchronized via NTF . Group members...
Which method dynamically installs the network routes for remote tunnel endpoints?
Which method dynamically installs the network routes for remote tunnel endpoints?A . policy-based routingB . CEFC . reverse route injectionD . route filteringView AnswerAnswer: C Explanation: Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnav/configuration/12-4t/sec-vpn-availability-12-4t-book/sec-rev-rte-inject.html
Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list?
Topic 1, Site-to-site Virtual Private Networks on Routers and Firewall Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list? (Choose two.)A . group-aliasB . certificate mapC . optimal gateway selectionD . group-urlE . AnyConnect client versionView AnswerAnswer: B,D
