Free certification test prep

Q11. Refer to the exhibit. The IKEv2 site-to-site VPN tunnel between two routers is down. Based on the debug output, which type of mismatch is the problem?

Q12. An engineer would like Cisco AnyConnect users to be able to reach servers within the 10.10.0.0/16 subnet while all other traffic is sent out to the Internet. Which IPsec configuration accomplishes this task?

Q13. A network engineer must expand a company’s Cisco AnyConnect solution. Currently, a Cisco ASA is set up in North America and another will be installed in Europe with a different IP address. Users should connect to the ASA that has the lowest Round Trip Time from their network location as measured by the AnyConnect client. Which solution must be implemented to meet this requirement?

Q14. Which redundancy protocol must be implemented for IPsec stateless failover to work?

Q15. A user is trying to log in to a Cisco ASA using the clientless SSLVPN feature and receives the error message “clientless (browser) SSLVPN access is not allowed”. Which step should the Cisco ASA administrator take to resolve this issue?

Q16. Refer to the exhibit.

Which two conclusions should be drawn from the DMVPN phase 2 configuration? (Choose two.)

Q17. Refer to the exhibit. An engineer has configured a spoke to connect to a FlexVPN hub. The tunnel is up, but pings fail when the engineer attempts to reach host 192.168.200.10 behind the spoke, and traffic is sourced from host 192.168.100.3, which is behind the FlexVPN server.
Based on packet captures, the engineer discovers that host 192.168.200.10 receives the icmp echo and sends an icmp reply that makes it to the inside interface of the spoke. Based on the output in the exhibit captured on the spoke by the engineer, which action resolves this issue?

Q18. Refer to the exhibit. A network administrator is setting up a phone VPN on a Cisco ASA. The phone cannot connect and the error is presented in a debug on the Cisco ASA. Which action fixes this issue?

Q19. A company’s remote locations connect to the data centers via MPLS. A new request requires that unicast and multicast traffic that exits in the remote locations be encrypted. Which non-tunneled technology should be used to satisfy this requirement?

Q20. A network engineer is setting up a clientless SSLVPN on a Cisco ASA. Remote users must be able to access an internal webserver via the URL example.com. Which two steps accomplish this task? (Choose two.)

Q21. Refer to the exhibit.

Which VPN technology is used in the exhibit?

Q22. Which command automatically initiates a smart tunnel when a user logs in to the WebVPN portal page?

Q23. Refer to the exhibit. An engineer is building an IKEv1 tunnel to a peer Cisco ASA, but the tunnel is failing. Based on the configuration in the exhibit, which action must be taken to allow the VPN tunnel to come up?

Q24. Under which section must a bookmark or URL list be configured on a Cisco ASA to be available for clientless SSLVPN users?

Q25. Which two cryptographic technologies are recommended for use with FlexVPN? (Choose two.)

Q26. Refer to the exhibit. The DMVPN spoke is not establishing a session with the hub. Which two actions resolve this issue? (Choose two.)