Cisco Deploying Cisco ASA VPN Solutions (VPN v2.0) Sample Questions:
1. Your IT department needs to run a custom-built TCP application within the clientless SSL VPN tunnel. The network administrator suggests running the smart tunnel application.
Which three statements concerning smart tunnel applications are true? (Choose three.)
A) They support active FTP and other RTSP-based applications.
B) They support native client applications over SSL VPN.
C) They do not require administrator privileges on the remote system.
D) They require the enabling of port forwarding.
E) They are supported on Windows and MAC OS X platforms.
F) They require the modification of the Host file on the end-user PC.
2. The software-based Cisco IPsec VPN Client solution uses bidirectional authentication, in which the client authenticates the Cisco ASA, and the Cisco ASA authenticates the user.
Which three methods are software-based Cisco IPsec VPN Client to Cisco ASA authentication methods? (Choose three.)
A) Secure Unit authentication
B) Group authentication
C) Certificate authentication
D) Unified Client Certificate authentication
E) Hybrid authentication
3. Refer to the exhibit.
A new NOC engineer is troubleshooting a VPN connection.
Which statement about the fields within the Cisco VPN Client Statistics screen is correct?
A) With split tunneling enabled, the Cisco VPN Client registers no decrypted packets.
B) The IP address of the security appliance to which the Cisco VPN Client is connected is
192.168.1.2.
C) The ISP-assigned IP address of 10.0.21.1 is assigned to the VPN adapter of the PC.
D) CorpNet is the name of the Cisco ASA group policy whose tunnel parameters the connection is using.
E) The ability of the client to send packets transparently and unencrypted through the tunnel for test purposes is turned off.
4. Refer to the exhibit.
The "level_2" digital certificate was installed on a laptop.
What can cause an "invalid not active" status message?
A) The user has not clicked the Verify button within the Cisco VPN Client.
B) On first use, a CA server-supplied passphrase is entered to validate the certificate.
C) The CA server and laptop PC clocks are out of sync.
D) A "newly installed" digital certificate does not become active until it is validated by the peer device upon its first usage.
5. Refer to the exhibit.
When you are testing SSL VPN in a non-production environment, certain variables in the Cisco ASDM session details can be viewed or changed under Configuration > AnyConnect Connection Profiles.
Which parameter can be viewed or changed in the AnyConnect Connection Profiles?
A) Client TypE. SSL VPN Client
B) Assigned IP address 10.0.1.50
C) Client Ver: Cisco AnyConnect VPN Agent for Windows
D) Authentication ModE. Certificate and User Password
Solutions:
| Question # 1 Answer: B,C,E | Question # 2 Answer: B,C,E | Question # 3 Answer: B | Question # 4 Answer: C | Question # 5 Answer: D |
966 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
