Question 1

300-730-page53-image32

Refer to the exhibit. Which type of Cisco VPN is shown for group Cisc012345678?

Options :

A : Cisco AnyConnect Client VPN

B :

DMVPN

C : Clientless SSLVPN

D : GETVPN

Answer: A

Question 2

What uses an Elliptic Curve key exchange algorithm?

Options :

A : ECDSA

B : ECDHE

C : AES-GCM

D : SHA

Answer: B

Question 3

Refer to the exhibit.

An engineer is building an IKEv1 tunnel to a peer Cisco ASA, but the tunnel is failing. Based on the configuration in the exhibit, which action must be taken to allow the VPN tunnel to come up?

Options :

A : Add a route for the 10.7.7.0/24 network to egress the outside interface.

B : Enable IKEv1 on the outside interface.

C : Change the IKEv1 policy number to be at least 256.

D : Change the transform set mode to transport.

Answer: B

Question 4

300-730-page53-image58

Refer to the exhibit. Which type of VPN implementation is displayed?

Options :

A : IKEv1 cluster

B :

IKEv2 backup gateway

C : IKEv2 load balancer

D :

IKEv2 reconnect

Answer: C

Question 5

An organization wants to distribute remote access VPN load across 12 VPN headend locations supporting 25,000 simultaneous users. Which load balancing method meets this requirement?

Options :

A : one VPN profile per site

B : DNS-based load balancing

C : AnyConnect native load balancing

D : equal cost, multipath load balancing

Answer: B