Q1. Which technology can provide high availability for an SSL VPN? 

A. DMVPN 

B. a multiple-tunnel configuration 

C. a Cisco ASA pair in active/passive failover configuration 

D. certificate to tunnel group maps 

View Answer

Q2. When an IPsec SVTI is configured, which technology processes traffic forwarding for encryption? 

A. ACL 

B. IP routing 

C. RRI 

D. front door VPN routing and forwarding 

View Answer

Q3. In FlexVPN, what command can an administrator use to create a virtual template interface that can be configured and applied dynamically to create virtual access interfaces? 

A. interface virtual-template number type template 

B. interface virtual-template number type tunnel 

C. interface template number type virtual 

D. interface tunnel-template number 

View Answer

Q4. Which two statements comparing.ECC and RSA are true? (Choose two.) 

A. ECC can have the same security as RSA but with a shorter key size. 

B. ECC lags in performance when compared with RSA. 

C. Key generation in ECC is slower and less CPU intensive. 

D. ECC cannot have the same security as RSA, even with an increased key size. 

E. Key generation in ECC is faster and less CPU intensive. 

View Answer

Q5. Which Cisco firewall platform supports Cisco NGE? 

A. FWSM 

B. Cisco ASA 5505 

C. Cisco ASA 5580 

D. Cisco ASA 5525-X 

View Answer

Q6. Which PKI enrollment method allows the user to separate authentication and enrollment actions and also provides an option to specify HTTP/TFTP commands to perform file retrieval from the server? 

A. enrollment profile 

B. enrollment terminal 

C. enrollment url 

D. enrollment selfsigned 

View Answer

Q7. What is the default storage location of user-level bookmarks in an IOS clientless SSL VPN? 

A. disk0:/webvpn/{context name}/ 

B. disk1:/webvpn/{context name}/ 

C. flash:/webvpn/{context name}/ 

D. nvram:/webvpn/{context name}/ 

View Answer

Q8. Refer to the exhibit. 

Which VPN solution does this configuration represent? 

A. Cisco AnyConnect 

B. IPsec 

C. L2TP 

D. SSL VPN 

View Answer

Q9. Which three commands are included in the command show dmvpn detail? (Choose three.) 

A. show ip nhrp nhs 

B. show dmvpn 

C. show crypto session detail 

D. show crypto ipsec sa detail 

E. show crypto sockets 

F. show ip nhrp 

View Answer

Q10. Which feature is enabled by the use of NHRP in a DMVPN network? 

A. host routing with Reverse Route Injection 

B. BGP multiaccess 

C. host to NBMA resolution 

D. EIGRP redistribution 

View Answer