A network engineer is setting up Cisco AnyConnect 4.9 on a Cisco ASA running ASA software
9.1. Cisco AnyConnect must connect to the Cisco ASA before the user logs on so that login scripts can work successfully. In addition, the VPN must connect without user intervention. Which two key steps accomplish this task? (Choose two.)

• A.Create a Cisco AnyConnect VPN profile with Always On set to true.
• B.Issue an identity certificate to the trusted root CA folder in the machine store.
• C.Create a Cisco Anyconnect VPN Management Tunnel profile.
• D.Create a Network Access Manager profile with a client policy set to connect before user logon.
• E.Create a Cisco AnyConnect VPN profile with Start Before Logon set to true.

Comment: *

Name: *

Email: *

Verification: *

A user is trying to log in to a Cisco ASA using the clientless SSLVPN feature and receives the error message "clientless (browser) SSLVPN access is not allowed". Which step should the Cisco ASA administrator take to resolve this issue?

• A.Enable the clientless VPN protocol on the group policy.
• B.Validate that the correct license is in use on the ASA for WebVPN.
• C.Increase the number of simultaneous logins allowed on the group policy.
• D.Verify that a user account exists in the local AAA database for the user.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Which two conclusions should be drawn from the DMVPN phase 2 configuration? (Choose two.)

• A.Next-hop-self is required.
• B.EIGRP neighbor adjacency will fail.
• C.EIGRP is used as the dynamic routing protocol.
• D.EIGRP route redistribution is not allowed.
• E.Spoke-to-spoke communication is allowed.

Comment: *

Name: *

Email: *

Verification: *

A Cisco AnyConnect client establishes a SSL VPN connection with an ASA at the corporate office. An engineer must ensure that the client computer meets the enterprise security policy. Which feature can update the client to meet an enterprise security policy?

• A.Endpoint Assessment
• B.Cisco Secure Desktop
• C.Basic Host Scan
• D.Advanced Endpoint Assessment

Comment: *

Name: *

Email: *

Verification: *

A Cisco ASA is configured in active/standby mode. What is needed to ensure that Cisco AnyConnect users can connect after a failover event?

• A.AnyConnect images must be uploaded to both failover ASA devices.
• B.The vpnsession-db must be cleared manually.
• C.Configure a backup server in the XML profile.
• D.AnyConnect client must point to the standby IP address.

Comment: *

Name: *

Email: *

Verification: *