- All Exams Instant Download
A private wan connection is suspected of intermittently corrupting data. Which technology can a network administrator use to detect and drop the altered data traffic?
A private wan connection is suspected of intermittently corrupting data. Which technology can a network administrator use to detect and drop the altered data traffic?A . AES-128B . RSA CertificatesC . SHA2-HMACD . 3DESE . Diffie-Helman Key GenerationView AnswerAnswer: C
Which encryption and authentication algorithms does Cisco recommend when deploying a Cisco NGE supported VPN solution?
Which encryption and authentication algorithms does Cisco recommend when deploying a Cisco NGE supported VPN solution?A . AES-GCM and SHA-2B . 3DES and DHC . AES-CBC and SHA-1D . 3DES and SHA-1View AnswerAnswer: A
Which algorithm is replaced by elliptic curve cryptography in Cisco NGE?
Which algorithm is replaced by elliptic curve cryptography in Cisco NGE?A . 3DESB . AESC . DESD . RSAView AnswerAnswer: D
What is the default topology type for a GET VPN?
What is the default topology type for a GET VPN?A . point-to-pointB . hub-and-spokeC . full meshD . on-demand spoke-to-spokeView AnswerAnswer: C
Which adaptive security appliance command can be used to see a generic framework of the requirements for configuring a VPN tunnel between an adaptive security appliance and a Cisco IOS router at a remote office?
Which adaptive security appliance command can be used to see a generic framework of the requirements for configuring a VPN tunnel between an adaptive security appliance and a Cisco IOS router at a remote office?A . vpnsetup site-to-site stepsB . show running-config cryptoC . show vpn-sessiondb l2lD . vpnsetup ssl-remote-access...
Which two features are required when configuring a DMVPN network? (Choose two.)
Which two features are required when configuring a DMVPN network? (Choose two.)A . Dynamic routing protocolB . GRE tunnel interfaceC . Next Hop Resolution ProtocolD . Dynamic crypto mapE . IPsec encryptionView AnswerAnswer: B, C
Which three remote access VPN methods in an ASA appliance provide support for Cisco Secure Desktop? (Choose three.)
Which three remote access VPN methods in an ASA appliance provide support for Cisco Secure Desktop? (Choose three.)A . IKEv1B . IKEv2C . SSL clientD . SSL clientlessE . ESPF . L2TPView AnswerAnswer: B, C, D
You are troubleshooting a site-to-site VPN issue where the tunnel is not establishing. After issuing the debug crypto ipsec command on the headend router, you see the following output. What does this output suggest?
You are troubleshooting a site-to-site VPN issue where the tunnel is not establishing. After issuing the debug crypto ipsec command on the headend router, you see the following output. What does this output suggest? 1d00h: IPSec (validate_proposal): transform proposal (port 3, trans 2, hmac_alg 2) not supported 1d00h: ISAKMP (0:2)...
Regarding licensing, which option will allow IKEv2 connections on the adaptive security appliance?
Regarding licensing, which option will allow IKEv2 connections on the adaptive security appliance?A . AnyConnect Essentials can be used for Cisco AnyConnect IKEv2 connections.B . IKEv2 sessions are not licensed.C . The Advanced Endpoint Assessment license must be installed to allow Cisco AnyConnect IKEv2 sessions.D . Cisco AnyConnect Mobile must...
Which statement describes a prerequisite for single-sign-on Netegrity Cookie Support in an IOC SSL VPN?
Which statement describes a prerequisite for single-sign-on Netegrity Cookie Support in an IOC SSL VPN?A . The Cisco AnyConnect Secure Mobility Client must be installed in flash.B . A SiteMinder plug-in must be installed on the Cisco SSL VPN gateway.C . A Cisco plug-in must be installed on a SiteMinder...
