[2026] Cisco Deploying Cisco ASA VPN Solutions (VPN v2.0)

문제1

Cisco AnyConnect profiles can be used to set which three options? (Choose three.)

A. Configure the Cisco Secure Desktop vault.

B. Define a list of backup servers if primary gateways are unavailable.

C. Activate the SSL VPN tunnel as part of the Windows login sequence.

D. Define a quarantine VLAN for remote devices that fail a host scan.

E. Define a list of VPN gateways that are presented to users upon login.

F. Define a guest VLAN to all "noncompany" Cisco IOS WebVPN users.

정답: B,C,E

설명: (Fast2test 회원만 볼 수 있음)

문제2

To enable the Cisco ASA Host Scan with remediation capabilities, an administrator must have which two Cisco ASA licenses enabled on its security appliance? (Choose two.)

A. Cisco AnyConnect Premium license

B. Advanced Endpoint Assessment license

C. Cisco AnyConnect Essentials license

D. Cisco AnyConnect Mobile license

E. Cisco Security Agent license

F. Host Scan license

정답: A,B

문제3

A remote user who establishes a clientless SSL VPN session is presented with a web page. The administrator has the option to customize the "look and feel" of the page. What are three components of the VPN Customization Editor? (Choose three.)

A. Home page

B. Portal page

C. Logout page

D. Logon page

E. Application page

F. Networking page

정답: B,C,D

설명: (Fast2test 회원만 볼 수 있음)

문제4

Which three statements are Cisco AnyConnect VPN Client deployment options? (Choose three.)

A. Automatically download the Cisco AnyConnect VPN Client upon Cisco IOS WebVPN login.

B. Configure the Cisco AnyConnect profile to automatically launch client or clientless SSL VPN upon discovering a trusted network.

C. Configure the Cisco AnyConnect profile to automatically disconnect the client or clientless SSL VPN tunnel upon discovering an untrusted network.

D. User manually launches client from SSL VPN clientless portal.

E. Prompt user upon Cisco IOS WebVPN login to select client or clientless SSL VPN within X seconds.

정답: A,D,E

설명: (Fast2test 회원만 볼 수 있음)

문제5

You are the network security administrator. You receive a call from a user stating that he cannot log onto the network. In the process of troubleshooting, you determine that this user is accessing the network via certificate-based Cisco AnyConnect SSL VPN.
What is a troubleshooting step that you should perform to determine the cause of the access problem?

A. Verify that a connection can be made without using certificates.

B. Check the WebACLs on the Cisco ASA.

C. Ask the user to use IPsec, and test the connection attempts.

D. Revoke and reissue the certificate, and have the user try again.

정답: A

문제6

When deploying clientless SSL VPNs, what should you do to support external unmanaged VPN clients?

A. Implement a global PKI service.

B. Configure policies specifically for the clients that have a group userID and password.

C. Deploy a private PKI service.

D. Issue self-signed identity certificates for the external clients that you wish to provide with access to your enterprise.

정답: A

문제7

Your corporate finance department purchased a new non-web-based TCP application tool to run on one of its servers. Certain finance employees need remote access to the software during nonbusiness hours. These employees do not have "admin" privileges to their PCs.
What is the correct way to configure the SSL VPN tunnel to allow this application to run?

A. Configure a "finance tool" VNC bookmark on the employee clientless SSL VPN portal.

B. Configure the plug-in that best fits the application.

C. Configure the Cisco ASA appliance to download the Cisco AnyConnect SSL VPN Client to the finance employee each time an SSL VPN tunnel is established.

D. Configure a smart tunnel for the application.

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제8

DRAG DROP

정답:

Explanation: DAP attributes
User Policy Attributes
Group Policy Attributes attached to the user profile
Group Policy Attributes attached to the connection profile
Default Group Policy Attributes

문제9

Which feature is supported when implementing an IPsec VPN configuration using IKEv2?

A. IKEv2 peer authentication can be implemented with asymmetric authentication methods.

B. When implementing IKEv2 with a site-to-site VPN, authentication parameters should contain a fallback to to PSKs, in case certificate-based authentication fails.

C. IKEv2 authentication can be configured to negotiate authentication modes within the IKE policy when using Cisco ASDM.

D. IKEv2 proposals are identical to IKEv1 policies.

정답: A

문제10

Refer to the exhibit.

When the user "contractor" Cisco AnyConnect tunnel is established, what type of Cisco ASA user restrictions are applied to the tunnel?

A. full restrictions (no Cisco ASDM, no CLI, no console access)

B. full access with no restrictions

C. full restrictions (CLI show commands and Cisco ASDM monitoring permissions only)

D. full restrictions (no read, no write, no execute permissions)

정답: B

Cisco Deploying Cisco ASA VPN Solutions (VPN v2.0) - 642-648무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트