Which method dynamically installs the network routes for remote tunnel endpoints?

• A.policy-based routing
• B.CEF
• C.reverse route injection
• D.route filtering

Comment: *

Name: *

Email: *

Verification: *

Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?

• A.*$SecureMobilityClient$*
• B.*$AnyConnectClient$*
• C.*$RemoteAccessVpnClient$*
• D.*$DfltlkeldentityS*

Comment: *

Name: *

Email: *

Verification: *

Which technology is used to send multicast traffic over a site-to-site VPN?

• A.GRE over IPsec on IOS router
• B.GRE over IPsec on FTD
• C.IPsec tunnel on FTD
• D.GRE tunnel on ASA

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit. An SSL client is connecting to an ASA headend. The session fails with the message
"Connection attempt has timed out. Please verify Internet connectivity." Based on how the packet is processed, which phase is causing the failure?

• A.phase 9: rpf-check
• B.phase 5: NAT
• C.phase 4: ACCESS-LIST
• D.phase 3: UN-NAT

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit. The customer can establish a Cisco AnyConnect connection without using an XML profile.
When the host "ikev2" is selected in the AnyConnect drop down, the connection fails. What is the cause of this issue?

• A.The HostName is incorrect.
• B.The IP address is incorrect.
• C.Primary protocol should be SSL.
• D.UserGroup must match connection profile.

Comment: *

Name: *

Email: *

Verification: *