QUESTION 45
What are two purposes of the key server in Cisco IOS GETVPN? (Choose two.)

QUESTION 46
A network engineer has set up a FlexVPN server to terminate multiple FlexVPN clients. The VPN tunnels are established without issue. However, when a Change of Authorization is issued by the RADIUS server, the FlexVPN server does not update the authorization of connected FlexVPN clients. Which action resolves this issue?

QUESTION 47
Which configuration construct must be used in a FlexVPN tunnel?

QUESTION 48
Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?

QUESTION 49
What are two advantages of using GETVPN to traverse over the network between corporate offices? (Choose two.)

QUESTION 50
Which command identifies a Cisco AnyConnect profile that was uploaded to the flash of an IOS router?

QUESTION 51
Which method dynamically installs the network routes for remote tunnel endpoints?

QUESTION 52
Refer to the exhibit.

Which type of VPN is used?

QUESTION 53
Refer to the exhibit.

The customer must launch Cisco AnyConnect in the RDP machine. Which IOS configuration accomplishes this task?

QUESTION 54
A network engineer is implementing a FlexVPN tunnel between two Cisco IOS routers. The FlexVPN tunnels will terminate on encrypted traffic on an interface configured with an IP MTU of 1500, and the company has a security policy to drop fragmented traffic coming into or leaving the network. The tunnel will be used to transfer TFTP data between users and internal servers. When the TFTP traffic is not traversing a VPN, it can have a maximum IP packet size of 1500. Assuming the encrypted payload will add 90 bytes, which configuration allows TFTP traffic to traverse the FlexVPN tunnel without being dropped?

QUESTION 55

Refer to the exhibit. What is a result of this configuration?

QUESTION 56
An engineer must investigate a connectivity issue and decides to use the packet capture feature on Cisco FTD. The goal is to see the real packet going through the Cisco FTD device and see Snort detection actions as a part of the output. After the capture-traffic command is issued, only the packets are displayed. Which action resolves this issue?

QUESTION 57
Which feature allows the ASA to handle nonstandard applications and web resources so that they display correctly over a clientless SSL VPN connection?

QUESTION 58
Over the weekend, an administrator upgraded the Cisco ASA image on the firewalls and noticed that users cannot connect to the headquarters site using Cisco AnyConnect. What is the solution for this issue?

QUESTION 59
Cisco AnyConnect clients need to transfer large files over the VPN sessions. Which protocol provides the best throughput?

QUESTION 60
Which parameter is initially used to elect the primary key server from a group of key servers?

QUESTION 61
What is a requirement for smart tunnels to function properly?

QUESTION 62
Which feature of GETVPN is a limitation of DMVPN and FlexVPN?

QUESTION 63
Refer to the exhibit.

A network engineer is configuring a remote access SSLVPN and is unable to complete the connection using local credentials. What must be done to remediate this problem?

QUESTION 64
Which two types of web resources or protocols are enabled by default on the Cisco ASA Clientless SSL VPN portal? (Choose two.)

QUESTION 65
Which VPN does VPN load balancing on the ASA support?