- All Exams Instant Download
Which command simplifies the task of converting an SSL VPN to an IKEv2 VPN on a Cisco ASA appliance that has an invalid IKEv2 configuration?
Which command simplifies the task of converting an SSL VPN to an IKEv2 VPN on a Cisco ASA appliance that has an invalid IKEv2 configuration?A . migrate remote-access ssl overwriteB . migrate remote-access ikev2C . migrate l2lD . migrate remote-access sslView AnswerAnswer: A Explanation: Below is a reference for this...
The Cisco AnyConnect client is unable to download an updated user profile from the ASA headend using IKEv2. What is the most likely cause of this problem?
The Cisco AnyConnect client is unable to download an updated user profile from the ASA headend using IKEv2. What is the most likely cause of this problem?A . User profile updates are not allowed with IKEv2.B . IKEv2 is not enabled on the group policy.C . A new profile must...
What action does the hub take when it receives a NHRP resolution request from a spoke for a network that exists behind another spoke?
What action does the hub take when it receives a NHRP resolution request from a spoke for a network that exists behind another spoke?A . The hub sends back a resolution reply to the requesting spoke.B . The hub updates its own NHRP mapping.C . The hub forwards the request...
What is the default topology type for a GET VPN?
What is the default topology type for a GET VPN?A . point-to-pointB . hub-and-spokeC . full meshD . on-demand spoke-to-spokeView AnswerAnswer: C
A user is unable to establish an AnyConnect VPN connection to an ASA. When using the Real-Time Log viewer within ASDM to troubleshoot the issue, which two filter options would the administrator choose to show only syslog messages relevant to the VPN connection? (Choose two.)
A user is unable to establish an AnyConnect VPN connection to an ASA. When using the Real-Time Log viewer within ASDM to troubleshoot the issue, which two filter options would the administrator choose to show only syslog messages relevant to the VPN connection? (Choose two.) A. Client's public IP address...
An internet-based VPN solution is being considered to replace an existing private WAN connecting remote offices. A multimedia application is used that relies on multicast for communication. Which two VPN solutions meet the application's network requirement? (Choose two.)
An internet-based VPN solution is being considered to replace an existing private WAN connecting remote offices. A multimedia application is used that relies on multicast for communication. Which two VPN solutions meet the application's network requirement? (Choose two.)A . FlexVPNB . DMVPNC . Group Encrypted Transport VPND . Crypto-map based...
Which command specifies the path to the Host Scan package in an ASA AnyConnect VPN?
Which command specifies the path to the Host Scan package in an ASA AnyConnect VPN?A . csd hostscan path imageB . csd hostscan image pathC . csd hostscan pathD . hostscan image pathView AnswerAnswer: B
A company has decided to migrate an existing IKEv1 VPN tunnel to IKEv2. Which two are valid configuration constructs on a Cisco IOS router? (Choose two.)
A company has decided to migrate an existing IKEv1 VPN tunnel to IKEv2. Which two are valid configuration constructs on a Cisco IOS router? (Choose two.)A . crypto ikev2 keyring keyring-name peer peer1 address 209.165.201.1 255.255.255.255 pre-shared-key local key1 pre-shared-key remote key2B . crypto ikev2 transform-set transform-set-name esp-3des esp-md5-hmac esp-aes...
An administrator had the above configuration working with SSL protocol, but as soon as the administrator specified IPsec as the primary protocol, the Cisco AnyConnect client was not able to connect. What is the problem?
Refer to the exhibit. An administrator had the above configuration working with SSL protocol, but as soon as the administrator specified IPsec as the primary protocol, the Cisco AnyConnect client was not able to connect. What is the problem?A . IPsec will not work in conjunction with a group URC...
Which two IKEv1 policy options must match on each peer when you configure an IPsec site-to-site VPN? (Choose two.)
Which two IKEv1 policy options must match on each peer when you configure an IPsec site-to-site VPN? (Choose two.)A . priority numberB . hash algorithmC . encryption algorithmD . session lifetimeE . PRF algorithmView AnswerAnswer: B, C
