Question 1

Refer to the exhibit.

Which component must be configured on routers for a GETVPN deployment work properly?

Options :

A : PE3: Key Server – Customer 2 CEs: Group Members

B : Customer 1 CE1: Key Server – R1 and Customer 1 CE2: Group Members

C : R1: Key Server – Customer 1 CEs: Group Members

D : PE3: Key Server – all CEs: Group Members

Answer: A

Question 2

An organization wants to distribute remote access VPN load across 12 VPN headend locations supporting 25,000 simultaneous users. Which load balancing method meets this requirement?

Options :

A : one VPN profile per site

B : DNS-based load balancing

C : AnyConnect native load balancing

D : equal cost, multipath load balancing

Answer: B

Question 3

When troubleshooting FlexVPN spoke-to-spoke tunnels, what should be verified first?

Options :

A : NHRP redirect is enabled on the hub.

B : The spokes have sent a resolution request.

C : NHRP cache entries exist on the spoke.

D : NHO routes exist on the spokes.

Answer: B

Question 4

A network administrator wants the Cisco ASA to automatically start downloading the Cisco AnyConnect client without prompting the user to select between WebVPN or AnyConnect. Which command accomplishes this task?

Options :

A : anyconnect ssl df-bit-ignore enable

B : anyconnect ask none default anyconnect

C : anyconnect ask enable default anyconnect

D : anyconnect modules value default

Answer: C

Question 5

Which Cisco AnyConnect component ensures that devices in a specific internal subnet are only accessible

using port 443?

Options :

A : routing

B : WebACL

C : split tunnel

D : VPN filter

Answer: D

Free 300-730 Mock Exam – Practice Online Confidently

Buying Options: