Q1. Which functionality is provided by L2TPv3 over FlexVPN? 

A. the extension of a Layer 2 domain across the FlexVPN 

B. the extension of a Layer 3 domain across the FlexVPN 

C. secure communication between servers on the FlexVPN 

D. a secure backdoor for remote access users through the FlexVPN 

View Answer

Q2. Which PKI enrollment method allows the user to separate authentication and enrollment actions and also provides an option to specify HTTP/TFTP commands to perform file retrieval from the server? 

A. enrollment profile 

B. enrollment terminal 

C. enrollment url 

D. enrollment selfsigned 

View Answer

Q3. Refer to the exhibit. 

Which type of VPN implementation is displayed? 

A. IKEv2 reconnect 

B. IKEv1 cluster 

C. IKEv2 load balancer 

D. IKEv1 client 

E. IPsec high availability 

F. IKEv2 backup gateway 

View Answer

Q4. Which cryptographic algorithms are a part of the Cisco NGE suite? 

A. HIPPA DES 

B. AES-CBC-128 

C. RC4-128 

D. AES-GCM-256 

View Answer

Q5. Refer to the exhibit. 

Which type of mismatch is causing the problem with the IPsec VPN tunnel? 

A. PSK 

B. Phase 1 policy 

C. transform set 

D. crypto access list 

View Answer

Q6. Refer to the exhibit. 

You have implemented an SSL VPN as shown. Which type of communication takes place between the secure gateway R1 and the Cisco Secure ACS? 

A. HTTP proxy 

B. AAA 

C. policy 

D. port forwarding 

View Answer

Q7. A user with IP address 10.10.10.10 is unable to access a HTTP website at IP address 

209.165.200.225 through a Cisco ASA. Which two features and commands will help troubleshoot the issue? (Choose two.) 

A. Capture user traffic using command capture capin interface inside match ip host 10.10.10.10 any 

B. After verifying that user traffic reaches the firewall using syslogs or captures, use packet tracer command packet-tracer input inside tcp 10.10.10.10 1234 209.165.200.225 80 

C. Enable logging at level 1 and check the syslogs using commands logging enable, logging buffered 1 and show logging | include 10.10.10.10 

D. Check if an access-list on the firewall is blocking the user by using command show running-config access-list | include 10.10.10.10 

E. Use packet tracer command packet-tracer input inside udp 0.10.10.10 1234192.168.1.3 161 to see what the firewall is doing with the user's traffic 

View Answer

Q8. A Cisco IOS SSL VPN gateway is configured to operate in clientless mode so that users can access file shares on a Microsoft Windows 2003 server. Which protocol is used between the Cisco IOS router and the Windows server? 

A. HTTPS 

B. NetBIOS 

C. CIFS 

D. HTTP 

View Answer

Q9. Which three plugins are available for clientless SSL VPN? (Choose three.) 

A. CIFS 

B. RDP2 

C. SSH 

D. VNC 

E. SQLNET 

F. ICMP 

View Answer

Q10. When a tunnel is initiated by the headquarter ASA, which one of the following Diffie-Hellman groups is selected by the headquarter ASA during CREATE_CHILD_SA exchange? 

A. 1 

B. 2 

C. 5 

D. 14 

E. 19 

View Answer