Which method dynamically installs the network routes for remote tunnel endpoints?

• A.policy-based routing
• B.CEF
• C.reverse route injection
• D.route filtering

Comment: *

Name: *

Email: *

Verification: *

A company needs to ensure only corporate issued laptops and devices are allowed to connect with the Cisco AnyConnect client. The solution should be applicable to multiple operating systems, including Windows, MacOS, and Linux, and should allow for remote remediation if a corporate issued device is stolen. Which solution should be used to accomplish these goals?

• A.Use a DAP registry check on the system to determine the relationship with the corporate domain.
• B.Use a DAP file check on the system to determine the relationship with the corporate domain.
• C.Install and authenticate user certificates on the corporate devices.
• D.Install and authenticate machine certificates on the corporate devices

Comment: *

Name: *

Email: *

Verification: *

A network engineer must design a clientless VPN solution for a company. VPN users must be able to access several internal web servers. When reachability to those web servers was tested, it was found that one website is not being rewritten correctly by the ASA.
What is a potential solution for this issue while still allowing it to be a clientless VPN setup?

• A.Set up a smart tunnel with the IP address of the web server.
• B.Set up a WebACL to permit the IP address of the web server.
• C.Set up Cisco AnyConnect with a split tunnel that has the IP address of the web server.
• D.Set up a NAT rule that translates the ASA public address to the web server private address on port 80.

Comment: *

Name: *

Email: *

Verification: *

An engineer is configuring clientless SSL VPN. The finance department has a database server that only they should access, but the sales department can currently access it. The finance and the sales departments are configured as separate group-policies. What must be added to the configuration to make sure the users in the sales department cannot access the finance department server?

• A.tunnel group lock
• B.smart tunnel
• C.port forwarding
• D.webtype ACL

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit. Users cannot connect via AnyConnect SSLVPN. Which action resolves this issue?

• A.Configure the HTTP server to listen on port 443.
• B.Add ssl-client to the allowed list of VPN protocols.
• C.Configure the ASA to act as a DHCP server.
• D.Add an IPsec preshared key to the group policy.

Comment: *

Name: *

Email: *

Verification: *