300-730試験無料問題集「Cisco Implementing Secure Solutions with Virtual Private Networks 認定」

A network administrator is troubleshooting an IPSec Site-to-Site VPN tunnel on a Cisco ASA firewall. The VPN tunnel is established but is unable to pass traffic between 192.168.10.155 and
192.168.100.172. The administrator observes the log message:
%ASA-4-402116: IPSEC: Received an ESP packet (SPI= 0x489041899C,
sequence number= 0x9E) from 100.1.1.1 (user= 100.1.1.1) to 12.12.12.12.
What must the administrator do to resolve this issue?

解説: (GoShiken メンバーにのみ表示されます)
A user is trying to log in to a Cisco ASA using the clientless SSLVPN feature and receives the error message "clientless (browser) SSLVPN access is not allowed". Which step should the Cisco ASA administrator take to resolve this issue?

解説: (GoShiken メンバーにのみ表示されます)
A Cisco AnyConnect client establishes a SSL VPN connection with an ASA at the corporate office. An engineer must ensure that the client computer meets the enterprise security policy.
Which feature can update the client to meet an enterprise security policy?

解説: (GoShiken メンバーにのみ表示されます)
Which two commands help determine why the NHRP registration process is not being completed even after the IPsec tunnel is up? (Choose two.)

解説: (GoShiken メンバーにのみ表示されます)
On an ASA with multiple connection profiles for different departments, what is the best design to ensure that AnyConnect users are assigned the correct connection profile based on their department and do not have the ability to choose a different connection profile?

Refer to the exhibit. Which VPN technology is allowed for users connecting to the Employee tunnel group?

解説: (GoShiken メンバーにのみ表示されます)
What is a characteristic of GET VPN?

解説: (GoShiken メンバーにのみ表示されます)
An engineer is using DMVPN to provide secure connectivity between a data center and remote sites. Which two routing protocols should be used between the routers? (Choose two.)

What are two variables for configuring clientless SSL VPN single sign-on? (Choose two.)

Refer to the exhibit. An engineer is diagnosing an issue that occurred after a router at a branch site was assigned a new address. Based on the debugs, what must be done to resolve this issue?

Refer to the exhibit. The DMVPN spoke is not establishing a session with the hub. Which two actions resolve this issue? (Choose two.)

Which Cisco AnyConnect component ensures that devices in a specific internal subnet are only accessible using port 443?

Refer to the exhibit. Based on the configuration output, what is the VPN technology?

Drag and Drop Question
Drag and drop the GET VPN components from the left onto the correct descriptions on the right.
正解:
Which type of VPN technology is being used when the ssl trust-point <trustpoint name>
<interface name> command is configured?

解説: (GoShiken メンバーにのみ表示されます)
A Cisco ASA is configured in active/standby mode. What is needed to ensure that Cisco AnyConnect users can connect after a failover event?

解説: (GoShiken メンバーにのみ表示されます)
Refer to the exhibit. Which type of VPN is being configured, based on the partial configuration snippet?

An engineer has integrated a new DMVPN to link remote offices across the internet using Cisco IOS routers. When connecting to remote sites, pings and voice data appear to flow properly, and all tunnel stats show that they are up. However, when trying to connect to a remote server using RDP, the connection fails. Which action resolves this issue?

Refer to the exhibit. A user is connecting from behind a PC with a private IP Address. Their ISP provider is blocking TCP port 443. Which AnyConnect XML configuration will allow the user to establish a connection with the ASA?