What represents a possible network configuration issue in clientless SSL VPN deployment? A. The AnyConnect version is not up to date B. NAT exemption has not been configured C. The VPN IP pool is exhausted D. The SSL server public…
Refer to the exhibit. An engineer is troubleshooting this configuration. Why is the VPN tunnel not functioning?" A. AES 256 can’t be used with IKEv1 B. IKEv1 is not enabled C. The IKEv1 policy number should be at least 256…
During an SSL session between a client and a server, who is responsible for generating the master key that generates the symmetric keys that are used during the session? A. public key infrastructure B. web server C. client browser D.…
Which way to send OSPF routing updates over a site-to-site IPsec tunnel is true? A. Set the network type for the DMZ interface to nonbroadcast mode, and add the headend as an OSPF neighbor. B. Set the network type for…
When you configure an access list on the external interface of a FlexVPN hub, which step is optional? A. allowing IP protocol 50 B. allowing ICMP protocol C. allowing UDP port 500 D. allowing UDP port 4500
Refer to the exhibit. Which description of the status of this VPN tunnel is true? A. The tunnel is up and waiting for traffic to flow across it. B. The phase 1 is complete, phase 2 status is unknown. C.…
Refer to the exhibit. A network security engineer is troubleshooting intermittent connectivity issues across a tunnel. Based on the output from the show crypto ipsec sa command, which cause is most likely? A. Return traffic is not coming back from…
Refer to the exhibit. An engineer must implement DMVPN phase 2 and was provided with this configuration by the senior engineer as a template. Which two conclusions can be made from the configuration? (Choose two.) A. EIGRP is used as…
A customer has two ASAs configured in high availability and is experiencing connection drops that require re-establishment each time failover occurs. Which type of failover has been implemented? A. stateful B. routed C. transparent D. stateless
An engineer is configuring an IKEv1 VPN tunnel. Which two Diffie-Hellman group values are valid for this implementation? (Choose two.) A. 2 B. 5 C. 10 D. 14 E. 19