In a FlexVPN deployment, the spokes successfully connect to the hub, but spoke-to-spoke tunnels do not form. Which troubleshooting step solves the issue?

• A.Verify the spoke configuration to check if the NHRP redirect is enabled.
• B.Verify that the spoke receives redirect messages and sends resolution requests.
• C.Verify the hub configuration to check if the NHRP shortcut is enabled.
• D.Verify that the tunnel interface is contained within a VRF.

Comment: *

Name: *

Email: *

Verification: *

Which benefit of FlexVPN is a limitation of DMVPN using IKEv1?

• A.GRE encapsulation allows for forwarding of non-IP traffic.
• B.IKE implementation can install routes in routing table.
• C.NHRP authentication provides enhanced security.
• D.Dynamic routing protocols can be configured.

Comment: *

Name: *

Email: *

Verification: *

Cisco AnyConnect Secure Mobility Client has been configured to use IKEv2 for one group of users and SSL for another group. When the administrator configures a new AnyConnect release on the Cisco ASA, the IKEv2 users cannot download it automatically when they connect. What might be the problem?

• A.Client software updates are not supported with IKEv2.
• B.Client services are not enabled.
• C.The new client image does not use the same major release as the current one.
• D.The XML profile is not configured correctly for the affected users.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Users cannot connect via AnyConnect SSLVPN. Which action resolves this issue?

• A.Add an IPsec preshared key to the group policy.
• B.Configure the ASA to act as a DHCP server.
• C.Configure the HTTP server to listen on port 443.
• D.Add ssl-client to the allowed list of VPN protocols.

Comment: *

Name: *

Email: *

Verification: *

A user at a company HQ is having trouble accessing a network share at a branch site that is connected with a L2L IPsec VPN. While troubleshooting, a network security engineer runs a packet tracer on the Cisco ASA to simulate the user traffic and discovers that the encryption counter is increasing but the decryption counter is not. What must be configured to correct this issue?

• A.Adjust the transform set to allow bidirectional traffic.
• B.Adjust the preshared key on the remote peer to allow traffic to flow over the tunnel.
• C.Adjust the routing on the remote peer device to direct traffic back over the tunnel.
• D.Adjust the peer IP address on the remote peer to direct traffic back to the ASA.

Comment: *

Name: *

Email: *

Verification: *