marks4sure logo
Which two changes must be made in order to migrate from DMVPN Phase 2 to Phase 3 when EIGRP is configured? (Choose two.)
A network engineer must design a remote access solution to allow contractors to access internal servers. These contractors do not have permissions to install applications on their computers. Which VPN solution should be used in this design?
Which remote access VPN technology requires the use of the IPsec-proposal configuration option?
Refer to the exhibit.
An IPsec Cisco AnyConnect client is failing to connect and generates these debugs every time a connection to an IOS headend is attempted. Which action resolves this issue?
What are two advantages of using GETVPN to traverse over the network between corporate offices? (Choose two.)
On a FlexVPN hub-and-spoke topology where spoke-to-spoke tunnels are not allowed, which command is needed for the hub to be able to terminate FlexVPN tunnels?
Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list? (Choose two.)
Refer to the exhibit.
Cisco AnyConnect must be set up on a router to allow users to access internal servers 192.168.0.10 and 192.168.0.11. All other traffic should go out of the client's local NIC. Which command accomplishes this configuration?
Which two commands help determine why the NHRP registration process is not being completed even after the IPsec tunnel is up? (Choose two.)
Which two features provide headend resiliency for Cisco AnyConnect clients? (Choose two.)
Cisco AnyConnect clients need to transfer large files over the VPN sessions. Which protocol provides the best throughput?
Which two statements about the Cisco ASA Clientless SSL VPN solution are true? (Choose two.)
Refer to the exhibit.
The customer must launch Cisco AnyConnect in the RDP machine. Which IOS configuration accomplishes this task?
Cisco AnyConnect Secure Mobility Client has been configured to use IKEv2 for one group of users and SSL for another group. When the administrator configures a new AnyConnect release on the Cisco ASA, the IKEv2 users cannot download it automatically when they connect. What might be the problem?
Where is split tunneling defined for IKEv2 remote access clients on a Cisco router?
Under which section must a bookmark or URL list be configured on a Cisco ASA to be available for clientless SSLVPN users?
Refer to the exhibit.
Which two commands under the tunnel-group webvpn-attributes result in a Cisco AnyConnect user receiving the AnyConnect prompt in the exhibit? (Choose two.)
Refer to the exhibit.
Which value must be configured in the User Group field when the Cisco AnyConnect Profile is created to connect to an ASA headend with IPsec as the primary protocol?
A second set of traffic selectors is negotiated between two peers using IKEv2. Which IKEv2 packet will contain details of the exchange?
Which two protocols does DMVPN leverage to build dynamic VPNs to multiple destinations? (Choose two.)
Which two types of web resources or protocols are enabled by default on the Cisco ASA Clientless SSL VPN portal? (Choose two.)
Refer to the exhibit.
Which VPN technology is allowed for users connecting to the Employee tunnel group?
Which feature allows a DMVPN Phase 3 spoke to switch to an alternate hub when the primary hub is unreachable?
Refer to the exhibit.
The IKEv2 site-to-site VPN tunnel between two routers is down. Based on the debug output, which type of mismatch is the problem?
Refer to the exhibit.
Which two tunnel types produce the show crypto ipsec sa output seen in the exhibit? (Choose two.)
Drag and drop the correct commands from the night onto the blanks within the code on the left to implement a design that allow for dynamic spoke-to-spoke communication. Not all comments are used.
Which command must be configured on the tunnel interface of a FlexVPN spoke to receive a dynamic IP address from the hub?
Which component must be configured on routers for a GETVPN deployment work properly?
A network engineer must configure the Cisco ASA so that Cisco AnyConnect clients establishing an SSL VPN connection create an additional tunnel for real-time traffic that is sensitive to packet delays. If this additional tunnel experiences any issues, it must fall back to a TLS connection. Which two Cisco AnyConnect features must be configured to accomplish this task? (Choose two.)
While troubleshooting, an engineer finds that the show crypto isakmp sa command indicates that the last state of the tunnel is MM_KEY_EXCH. What is the next step that should be taken to resolve this issue?
TESTED 01 May 2024
