لا تريد أن تفوت شيئا؟

نصائح اجتياز امتحان الشهادة

آخر أخبار الامتحانات ومعلومات الخصم

برعاية وحديثة من قبل خبرائنا

نعم، أرسل لي النشرة الإخبارية

خذ اختبارات أخرى عبر الإنترنت
السؤال #1
The customer can establish a Cisco AnyConnect connection without using an XML profile. When the host "ikev2" is selected in the AnyConnect drop down, the connection fails. What is the cause of this issue?
A. The HostName is incorrect
B. The IP address is incorrect
C. Primary protocol should be SSL
D. UserGroup must match connection profile
عرض الإجابة
اجابة صحيحة: CD
السؤال #2
Which two types of web resources or protocols are enabled by default on the Cisco ASA Clientless SSL VPN portal? (Choose two.)
A. HTTP
B. ICA (Citrix)
C. VNC
D. RDP
E. CIFS
عرض الإجابة
اجابة صحيحة: BD
السؤال #3
Which VPN technology is used in the exhibit?
A. DVTI
B. VTI
C. DMVPN
D. GRE
عرض الإجابة
اجابة صحيحة: D
السؤال #4
Cisco AnyConnect Secure Mobility Client has been configured to use IKEv2 for one group of users and SSL for another group. When the administrator configures a new AnyConnect release on the Cisco ASA, the IKEv2 users cannot download it automatically when they connect. What might be the problem?
A. The XML profile is not configured correctly for the affected users
B. The new client image does not use the same major release as the current one
C. Client services are not enabled
D. Client software updates are not supported with IKEv2
عرض الإجابة
اجابة صحيحة: C
السؤال #5
An engineer is troubleshooting a new GRE over IPsec tunnel. The tunnel is established but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked?
A. ESP packets from spoke2 to spoke1
B. ISAKMP packets from spoke2 to spoke1
C. ESP packets from spoke1 to spoke2
D. ISAKMP packets from spoke1 to spoke2
عرض الإجابة
اجابة صحيحة: D
السؤال #6
In a FlexVPN deployment, the spokes successfully connect to the hub, but spoke-to-spoke tunnels do not form. Which troubleshooting step solves the issue?
A. Verify the spoke configuration to check if the NHRP redirect is enabled
B. Verify that the spoke receives redirect messages and sends resolution requests
C. Verify the hub configuration to check if the NHRP shortcut is enabled
D. Verify that the tunnel interface is contained within a VRF
عرض الإجابة
اجابة صحيحة: C
السؤال #7
Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?
A. use of certificates instead of username and password
B. EAP-AnyConnect
C. EAP query-identity
D. AnyConnect profile
عرض الإجابة
اجابة صحيحة: CD
السؤال #8
Which type of mismatch is causing the problem with the IPsec VPN tunnel?
A. crypto access list
B. Phase 1 policy
C. transform set
D. preshared key
عرض الإجابة
اجابة صحيحة: BE
السؤال #9
Which VPN solution uses TBAR?
A. GETVPN
B. VTI
C. DMVPN
D. Cisco AnyConnect
عرض الإجابة
اجابة صحيحة: A
السؤال #10
Which VPN does VPN load balancing on the ASA support?
A. VTI
B. IPsec site-to-site tunnels
C. L2TP over IPsec
D. Cisco AnyConnect
عرض الإجابة
اجابة صحيحة: C
السؤال #11
An SSL client is connecting to an ASA headend. The session fails with the message “Connection attempt has timed out. Please verify Internet connectivity.” Based on how the packet is processed, which phase is causing the failure?
A. phase 9: rpf-check
B. phase 5: NAT
C. phase 4: ACCESS-LIST
D. phase 3: UN-NAT
عرض الإجابة
اجابة صحيحة: B
السؤال #12
Which feature allows the ASA to handle nonstandard applications and web resources so that they display correctly over a clientless SSL VPN connection?
A. single sign-on
B. Smart Tunnel
C. WebType ACL
D. plug-ins
عرض الإجابة
اجابة صحيحة: DE
السؤال #13
Which VPN technology is allowed for users connecting to the Employee tunnel group?
A. SSL AnyConnect
B. IKEv2 AnyConnect
C. crypto map
D. clientless
عرض الإجابة
اجابة صحيحة: C
السؤال #14
Cisco AnyConnect must be set up on a router to allow users to access internal servers 192.168.0.10 and 192.168.0.11. All other traffic should go out of the client's local NIC. Which command accomplishes this configuration?
A. svc split include 192
B. svc split exclude 192
C. svc split include acl CCNP
D. svc split exclude acl CCNP
عرض الإجابة
اجابة صحيحة: B
السؤال #15
Client 1 cannot communicate with client 2. Both clients are using Cisco AnyConnect and have established a successful SSL VPN connection to the hub ASA. Which command on the ASA is missing?
A. dns-server value 10
B. same-security-traffic permit intra-interface
C. same-security-traffic permit inter-interface
D. dns-server value 10
عرض الإجابة
اجابة صحيحة: B
السؤال #16
What are two functions of ECDH and ECDSA? (Choose two.)
A. nonrepudiation
B. revocation
C. digital signature
D. key exchange
E. encryption
عرض الإجابة
اجابة صحيحة: A
السؤال #17
Under which section must a bookmark or URL list be configured on a Cisco ASA to be available for clientless SSLVPN users?
A. tunnel-group (general-attributes)
B. tunnel-group (webvpn-attributes)
C. webvpn (group-policy)
D. webvpn (global configuration)
عرض الإجابة
اجابة صحيحة: D
السؤال #18
The IKEv2 site-to-site VPN tunnel between two routers is down. Based on the debug output, which type of mismatch is the problem?
A. preshared key
B. peer identity
C. transform set
D. ikev2 proposal
عرض الإجابة
اجابة صحيحة: C
السؤال #19
What is a result of this configuration?
A. Spoke 1 fails the authentication because the authentication methods are incorrect
B. Spoke 2 passes the authentication to the hub and successfully proceeds to phase 2
C. Spoke 2 fails the authentication because the remote authentication method is incorrect
D. Spoke 1 passes the authentication to the hub and successfully proceeds to phase 2
عرض الإجابة
اجابة صحيحة: D
السؤال #20
Which two commands under the tunnel-group webvpn-attributes result in a Cisco AnyConnect user receiving the AnyConnect prompt in the exhibit? (Choose two.)
A. group-url https://172
B. group-policy General internal
C. authentication aaa
D. authentication certificate
E. group-alias General enable
عرض الإجابة
اجابة صحيحة: D
السؤال #21
A Cisco AnyConnect client establishes a SSL VPN connection with an ASA at the corporate office. An engineer must ensure that the client computer meets the enterprise security policy. Which feature can update the client to meet an enterprise security policy?
A. Endpoint Assessment
B. Cisco Secure Desktop
C. Basic Host Scan
D. Advanced Endpoint Assessment
عرض الإجابة
اجابة صحيحة: C
السؤال #22
All internal clients behind the ASA are port address translated to the public outside interface that has an IP address of 3.3.3.3. Client 1 and client 2 have established successful SSL VPN connections to the ASA. What must be implemented so that "3.3.3.3" is returned from a browser search on the IP address?
A. Same-security-traffic permit inter-interface under Group Policy
B. Exclude Network List Below under Group Policy
C. Tunnel All Networks under Group Policy
D. Tunnel Network List Below under Group Policy
عرض الإجابة
اجابة صحيحة: B
السؤال #23
Based on the exhibit, why are users unable to access CCNP Webserver bookmark?
A. The URL is being blocked by a WebACL
B. The ASA cannot resolve the URL
D. The user cannot access the URL
عرض الإجابة
اجابة صحيحة: A
السؤال #24
Based on the debug output, which type of mismatch is preventing the VPN from coming up?
A. interesting traffic
B. lifetime
C. preshared key
D. PFS
عرض الإجابة
اجابة صحيحة: C
السؤال #25
Cisco AnyConnect clients need to transfer large files over the VPN sessions. Which protocol provides the best throughput?
A. SSL/TLS
B. L2TP
C. DTLS
D. IPsec IKEv1
عرض الإجابة
اجابة صحيحة: B
السؤال #26
A site-to-site tunnel between two sites is not coming up. Based on the debugs, what is the cause of this issue?
A. An authentication failure occurs on the remote peer
B. A certificate fragmentation issue occurs between both sides
C. UDP 4500 traffic from the peer does not reach the router
D. An authentication failure occurs on the router
عرض الإجابة
اجابة صحيحة: B

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:
رقم الواتس اب/الهاتف:


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.