What is a characteristic of GETVPN?

• A.An ACL that defines interesting traffic must be configured and applied to the crypto map.
• B.Quick mode is used to create an IPsec SA.
• C.The remote peer for the IPsec session is configured as part of the crypto map.
• D.All peers have one IPsec SPI for inbound and outbound communication.

Comment: *

Name: *

Email: *

Verification: *

Which Cisco AnyConnect component ensures that devices in a specific internal subnet are only accessible using port 443?

• A.VPN filter
• B.routing
• C.split tunnel
• D.WebACL

Comment: *

Name: *

Email: *

Verification: *

An engineer would like Cisco AnyConnect users to be able to reach servers within the 10.10.0.0/16 subnet while all other traffic is sent out to the Internet. Which IPsec configuration accomplishes this task?

• A.Option B
• B.Option C
• C.Option A
• D.Option D

Comment: *

Name: *

Email: *

Verification: *

Which two types of SSO functionality are available on the Cisco ASA without any external SSO servers? (Choose two.)

• A.SAML
• B.NTLM
• C.Kerberos
• D.OAuth 2.0
• E.HTTP Basic

Comment: *

Name: *

Email: *

Verification: *

A network engineer is configuring a server. The router will terminate encrypted VPN connections on g0/0, which is in the VRF "Internet". The clear-text traffic that must be encrypted before being sent out traverses g0/1, which is in the VRF "Internal". Which two VRF-specific configurations allow VPN traffic to traverse the VRF-aware interfaces? (Choose two.)

• A.Under the IKEv2 profile, add the ivrf Internal command.
• B.Under the virtual-template interface, add the tunnel vrf Internet command.
• C.Under the IKEv2 profile, add the match fvrf Internal command.
• D.Under the IKEv2 profile, add the match fvrf Internet command.
• E.Under the virtual-template interface, add the ip vrf forwarding Internet command.

Comment: *

Name: *

Email: *

Verification: *