- All Exams Instant Download
Which protocol provides the best throughput?
Cisco AnyConnect clients need to transfer large files over the VPN sessions. Which protocol provides the best throughput?A . SSL/TLSB . L2TPC . DTLSD . IPsec IKEv1View AnswerAnswer: C
Which two types of web resources or protocols are enabled by default on the Cisco ASA Clientless SSL VPN portal? (Choose two.)
Which two types of web resources or protocols are enabled by default on the Cisco ASA Clientless SSL VPN portal? (Choose two.)A . HTTPB . ICA (Citrix)C . VNCD . RDPE . CIFSView AnswerAnswer: AE Explanation: HTTP (Hypertext Transfer Protocol) is used for transferring web resources, such as web pages...
What is needed to ensure that Cisco AnyConnect users can connect after a failover event?
A Cisco ASA is configured in active/standby mode. What is needed to ensure that Cisco AnyConnect users can connect after a failover event?A . AnyConnect images must be uploaded to both failover ASA devices.B . The vpnsession-db must be cleared manually.C . Configure a backup server in the XML profile.D...
What is a result of this configuration?
Refer to the exhibit. What is a result of this configuration?A . Spoke 1 fails the authentication because the authentication methods are incorrect.B . Spoke 2 passes the authentication to the hub and successfully proceeds to phase 2.C . Spoke 2 fails the authentication because the remote authentication method is...
Which two statements about the Cisco ASA Clientless SSL VPN solution are true? (Choose two.)
Which two statements about the Cisco ASA Clientless SSL VPN solution are true? (Choose two.)A . When a client connects to the Cisco ASA WebVPN portal and tries to access HTTP resources through the URL bar, the client uses the local DNS to perform FQDN resolution.B . The rewriter enable...
Which parameter must match on all routers in a DMVPN Phase 3 cloud?
Which parameter must match on all routers in a DMVPN Phase 3 cloud?A . GRE tunnel keyB . NHRP network IDC . tunnel VRFD . EIGRP split-horizon settingView AnswerAnswer: A Explanation: NHRP network IDs are locally significant and can be different. It makes sense from a deployment and maintenance perspective...
Which spoke configuration mitigates tunnel drops?
Refer to the exhibit. The DMVPN tunnel is dropping randomly and no tunnel protection is configured. Which spoke configuration mitigates tunnel drops? A) B) C) D) A . Option AB . Option BC . Option CD . Option DView AnswerAnswer: C Explanation: https://www.globalknowledge.com/us-en/resources/resource-library/articles/understanding-next-hop-resolution-protocol-commands/
Which troubleshooting step solves the issue?
In a FlexVPN deployment, the spokes successfully connect to the hub, but spoke-to-spoke tunnels do not form. Which troubleshooting step solves the issue?A . Verify the spoke configuration to check if the NHRP redirect is enabled.B . Verify that the spoke receives redirect messages and sends resolution requests.C . Verify...
Which command accomplishes this configuration?
Refer to the exhibit. Cisco AnyConnect must be set up on a router to allow users to access internal servers 192.168.0.10 and 192.168.0.11. All other traffic should go out of the client's local NIC. Which command accomplishes this configuration?A . svc split include 192.168.0.0 255.255.255.0B . svc split exclude 192.168.0.0...
What is a requirement for smart tunnels to function properly?
What is a requirement for smart tunnels to function properly?A . Java or ActiveX must be enabled on the client machine.B . Applications must be UDP.C . Stateful failover must not be configured.D . The user on the client machine must have admin access.View AnswerAnswer: A Explanation: Reference: https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/111007-smart-tunnel-asa-00.html
