Q1. CORRECT TEXT 

View Answer

Q2. The Cisco AnyConnect client fails to connect via IKEv2 but works with SSL. The following error message is displayed: 

"Login Denied, unauthorized connection mechanism, contact your administrator" 

What is the most possible cause of this problem? 

A. DAP is terminating the connection because IKEv2 is the protocol that is being used. 

B. The client endpoint does not have the correct user profile to initiate an IKEv2 connection. 

C. The AAA server that is being used does not authorize IKEv2 as the connection mechanism. 

D. The administrator is restricting access to this specific user. 

E. The IKEv2 protocol is not enabled in the group policy of the VPN headend. 

View Answer

Q3. Which technology supports tunnel interfaces while remaining compatible with legacy VPN implementations? 

A. FlexVPN 

B. DMVPN 

C. GET VPN 

D. SSL VPN 

View Answer

Q4. A custom desktop application needs to access an internal server. An administrator is tasked with configuring the company's SSL VPN gateway to allow remote users to work. Which two technologies would accommodate the company's requirement? (Choose two). 

A. AnyConnect client 

B. Smart Tunnels 

C. Email Proxy 

D. Content Rewriter 

E. Portal Customizations 

View Answer

Q5. Which three types of SSO functionality are available on the Cisco ASA without any external SSO servers? (Choose three.) 

A. SAML 

B. HTTP POST 

C. HTTP Basic 

D. NTLM 

E. Kerberos 

F. OAuth 2.0 

View Answer

Q6. As network consultant, you are asked.to suggest a VPN technology that can support a multivendor environment and secure traffic between sites. Which technology should you recommend? 

A. DMVPN 

B. FlexVPN 

C. GET VPN 

D. SSL VPN 

View Answer

Q7. Scenario: 

You are the senior network security administrator for your organization. Recently and junior engineer configured a site-to-site IPsec VPN connection between your headquarters Cisco ASA and a remote branch office. 

You are now tasked with verifying the IKEvl IPsec installation to ensure it was properly configured according to designated parameters. Using the CLI on both the Cisco ASA and branch ISR, verify the IPsec configuration is properly configured between the two sites. 

NOTE: the show running-config command cannot be used for this exercise. 

Topology: 

Which transform set is being used on the branch ISR? 

A. Default 

B. ESP-3DES ESP-SHA-HMAC 

C. ESP-AES-256-MD5-TRANS mode transport 

D. TSET 

View Answer