Implementing Secure Solutions with Virtual Private Networks (SVPN)189 questions across 19 pages are complete and free, with no account or card.
189 questions in this bank
Free access · progress saved on this device
Refer to the exhibit. An engineer has configured two new VPN tunnels to 172.18.1.1 and 172.19.1.1. However, communication between 10.1.0.10 and 10.1.11.10 does not function. Which action should be taken to resolve this issue?
Answer: D
Not clear if the correct routers are selected for the peer addresses, but the netmask on RemoteNet2 would catch RemoteNet3 traffic also
Source: Adapted from community discussion — netizen937
Refer to the exhibit. A network administrator is setting up Cisco AnyConnect on an ASA headend. When users attempt to connect to the VPN, they are presented with this message. The administrator has replaced the ASA's self-signed certificate with a certificate enrolled with the internal CA and has confirmed that the certificate is not revoked. Which two tasks will the administrator need to do to prevent users from seeing this message? (Choose two.)
Answer: AB
Which feature must be disabled in EIGRP for DMVPN spokes to learn routes to other DMVPN spokes?
Answer: A
Which command must be configured on the tunnel interface of a FlexVPN spoke to receive a dynamic IP address from the hub?
Answer: A
ChatGPT can make mistakes. Consider checking important information. "FlexVPN Spoke in Redundant Hub Design with FlexVPN Client Block Configuration Example" interface Tunnel1 description FlexVPN tunnel ip address negotiated ip mtu 1400 ip nhrp network-id 2 ip nhrp shortcut virtual-template 1 ip nhrp redirect ip tcp adjust-mss 1360 delay 2000 tunnel source Ethernet0/0 tunnel destination dynamic tunnel path-mtu-discovery tunnel protection ipsec profile default https://www.cisco.com/c/en/us/support/docs/security/flexvpn/116413-configure-flexvpn-00.html
Source: Adapted from community discussion — Stevens0103
Which configuration allows a Cisco ASA to receive an IPsec connection from a peer with an unknown IP address?
Answer: A
Which two features provide headend resiliency for Cisco AnyConnect clients? (Choose two.)
Answer: CD
Headend resiliency, not client resiliency, Backup Server will point to another headend, ASA failover will activate the secondary unit of the HA Pair, therefore, a new Headend will handle those AnyConnect sessions
Source: Adapted from community discussion — jetiingeniero
An organization wants to implement a site-to-site VPN solution that must be able to support 350 sites with direct communications between all sites, fully encrypt the packet header and payload, and support propagation of routing information over IPsec. Which solution meets these requirements?
Answer: D
Thinking D. "support propagation of routing information over IPsec" Sounds like Route Injection via IKEv2 Authorization. This is supported through FlexVPN
Source: Adapted from community discussion — brian7857ffs45
Refer to the exhibit.
Which type of VPN tunnel is configured?
Answer: D
"D" is the correct answer here: The provided configuration indicates that a GRE (Generic Routing Encapsulation) over IPsec tunnel is configured. Here's why: Tunnel Source/Destination: The configuration specifies a source interface (GigabitEthernet0/1) and a destination IP address (128.17.64.8). This aligns with the characteristics of a GRE tunnel, where the source interface is the physical interface, and the destination IP address is the endpoint of the tunnel. Tunnel Protection: The command tunnel protection ipsec profile DMVPN_profile indicates that IPsec is used to protect the GRE tunnel. This combination of GRE and IPsec is commonly used in scenarios where you want to provide secure communication between sites, and it's often associated with technologies like DMVPN (Dynamic Multipoint Virtual Private Network). While GRE over IPsec is a component of DMVPN, the provided configuration doesn't explicitly configure DMVPN features. Therefore, it's accurate to describe the configured tunnel as GRE over IPsec.
Source: Adapted from community discussion — kylesam2017
A network administrator wants the Cisco ASA to automatically start downloading the Cisco AnyConnect client without prompting the user to select between WebVPN or AnyConnect. Which command accomplishes this task?
Answer: B
The anyconnect ask command specifies how the anyconnect client will be installed on the user’s computer. The none default anyconnect part tells the ASA not to ask the user if he/she wants to use WebVPN or anyconnect but just starts the download of the anyconnect client automatically. https://networklessons.com/cisco/asa-firewall/cisco-asa-anyconnect-remote-access-vpn#:~:text=The%20anyconnect%20ask%20command%20specifies,of%20the%20anyconnect%20client%20automatically.
Source: Adapted from community discussion — Acnaris
A clientless SSLVPN solution is built for 10 employees on a newly installed Cisco ASA. After a couple of days in production, it has been observed that only the first two users to log in each day are able to connect successfully. The remaining users encounter the message "Login failed". Which action resolves the issue?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-730 practice, question 71. 189 questions available.
Version 1.0.0. How we source questions