Question 1

A network administrator wants the Cisco ASA to automatically start downloading the Cisco AnyConnect client without prompting the user to select between WebVPN or AnyConnect. Which command accomplishes this task?

Options :

A : anyconnect ssl df-bit-ignore enable

B : anyconnect ask none default anyconnect

C : anyconnect ask enable default anyconnect

D : anyconnect modules value default

Answer: C

Question 2

Refer to the exhibit.

An engineer is building an IKEv1 tunnel to a peer Cisco ASA, but the tunnel is failing. Based on the configuration in the exhibit, which action must be taken to allow the VPN tunnel to come up?

Options :

A : Add a route for the 10.7.7.0/24 network to egress the outside interface.

B : Enable IKEv1 on the outside interface.

C : Change the IKEv1 policy number to be at least 256.

D : Change the transform set mode to transport.

Answer: B

Question 3

300-730-page53-image58

Refer to the exhibit. Which type of VPN implementation is displayed?

Options :

A : IKEv1 cluster

B :

IKEv2 backup gateway

C : IKEv2 load balancer

D :

IKEv2 reconnect

Answer: C

Question 4

300-730-page53-image10

Refer to the exhibit. Which value must be configured in the User Group field when the Cisco AnyConnect

Profile is created to connect to an ASA headend with IPsec as the primary protocol?

Options :

A : address-pool

B : group-alias

C : group-policy

D : tunnel-group

Answer: D

Question 5

What uses an Elliptic Curve key exchange algorithm?

Options :

A : ECDSA

B : ECDHE

C : AES-GCM

D : SHA

Answer: B