Q1. What does NHRP stand for? 

A. Next Hop Resolution Protocol 

B. Next Hop Registration Protocol C. Next Hub Routing Protocol 

D. Next Hop Routing Protocol 

View Answer

Q2. Which technology is FlexVPN based on? 

A. OER 

B. VRF 

C. IKEv2 

D. an RSA nonce 

View Answer

Q3. Which IKEv2 feature minimizes the configuration of a FlexVPN on Cisco IOS devices? 

A. IKEv2 Suite-B 

B. IKEv2 proposals 

C. IKEv2 profiles 

D. IKEv2 Smart Defaults 

View Answer

Q4. Which two technologies are considered to be Suite B cryptography? (Choose two.) 

A. MD5 

B. SHA2 

C. Elliptical Curve Diffie-Hellman 

D. 3DES 

E. DES 

View Answer

Q5. Which of the following could be used to configure remote access VPN Host-scan and pre-login policies? 

A. ASDM 

B. Connection-profile CLI command 

C. Host-scan CLI command under the VPN group policy 

D. Pre-login-check CLI command 

View Answer

Q6. An administrator wishes to limit the networks reachable over the Anyconnect VPN tunnels. Which configuration on the ASA will correctly limit the networks reachable to 209.165.201.0/27 and 209.165.202.128/27? 

A. access-list splitlist standard permit 209.165.201.0 255.255.255.224 

access-list splitlist standard permit 209.165.202.128 255.255.255.224 

! 

group-policy GroupPolicy1 internal 

group-policy GroupPolicy1 attributes 

split-tunnel-policy tunnelspecified 

split-tunnel-network-list value splitlist 

B. access-list splitlist standard permit 209.165.201.0 255.255.255.224 

access-list splitlist standard permit 209.165.202.128 255.255.255.224 

! 

group-policy GroupPolicy1 internal 

group-policy GroupPolicy1 attributes 

split-tunnel-policy tunnelall 

split-tunnel-network-list value splitlist 

C. group-policy GroupPolicy1 internal 

group-policy GroupPolicy1 attributes 

split-tunnel-policy tunnelspecified 

split-tunnel-network-list ipv4 1 209.165.201.0 255.255.255.224 

split-tunnel-network-list ipv4 2 209.165.202.128 255.255.255.224 

D. access-list splitlist standard permit 209.165.201.0 255.255.255.224 

access-list splitlist standard permit 209.165.202.128 255.255.255.224 

! 

crypto anyconnect vpn-tunnel-policy tunnelspecified 

crypto anyconnect vpn-tunnel-network-list splitlist 

E. crypto anyconnect vpn-tunnel-policy tunnelspecified 

crypto anyconnect split-tunnel-network-list ipv4 1 209.165.201.0 255.255.255.224 

crypto anyconnect split-tunnel-network-list ipv4 2 209.165.202.128 255.255.255.224 

View Answer

Q7. When a tunnel is initiated by the headquarter ASA, which one of the following Diffie-Hellman groups is selected by the headquarter ASA during CREATE_CHILD_SA exchange? 

A. 1 

B. 2 

C. 5 

D. 14 

E. 19 

View Answer

Q8. Which option shows the correct traffic selectors for the child SA on the remote ASA, when the headquarter ASA initiates the tunnel? 

A. Local selector 192.168.33.0/0-192.168.33.255/65535 Remote selector 192.168.20.0/0-192.168.20.255/65535 

B. Local selector 192.168.33.0/0-192.168.33.255/65535 Remote selector 192.168.22.0/0-192.168.22.255/65535 

C. Local selector 192.168.22.0/0-192.168.22.255/65535 Remote selector 192.168.33.0/0-192.168.33.255/65535 

D. Local selector 192.168.33.0/0-192.168.33.255/65535 Remote selector 0.0.0.0/0 -0.0.0.0/65535 

E. Local selector 0.0.0.0/0 - 0.0.0.0/65535 Remote selector 192.168.22.0/0 -192.168.22.255/65535 

View Answer

Q9. Which encryption and authentication algorithms does Cisco recommend when deploying a Cisco NGE supported VPN solution? 

A. AES-GCM and SHA-2 

B. 3DES and DH 

C. AES-CBC and SHA-1 

D. 3DES and SHA-1 

View Answer

Q10. Where do you configure AnyConnect certificate-based authentication in ASDM? 

A. group policies 

B. AnyConnect Connection Profile 

C. AnyConnect Client Profile 

D. Advanced Network (Client) Access 

View Answer