QUESTION 22
Refer to the exhibit.

Which two conclusions should be drawn from the DMVPN phase 2 configuration? (Choose two.)

QUESTION 23
An engineer is creating an URL object on Cisco FMC. How must it be configured so that the object will match for HTTPS traffic in an access control policy?

QUESTION 24
What must be configured in a FlexVPN deployment to allow for direct communication between spokes connected to different hubs?

QUESTION 25
Which two features provide headend resiliency for Cisco AnyConnect clients? (Choose two.)

QUESTION 26
Which technology is used to send multicast traffic over a site-to-site VPN?

QUESTION 27

Refer to the exhibit. Which VPN technology is allowed for users connecting to the Employee tunnel group?

QUESTION 28
A network engineer is configuring a server. The router will terminate encrypted VPN connections on g0/0, which is in the VRF “Internet”. The clear-text traffic that must be encrypted before being sent out traverses g0/1, which is in the VRF “Internal”. Which two VRF-specific configurations allow VPN traffic to traverse the VRF-aware interfaces? (Choose two.)

QUESTION 29
Which two changes must be made in order to migrate from DMVPN Phase 2 to Phase 3 when EIGRP is configured? (Choose two.)

QUESTION 30
When a FlexVPN is configured, which two components must be configured for IKEv2? (Choose two.)

QUESTION 31

Refer to the exhibit. Which two commands under the tunnel-group webvpn-attributes result in a Cisco AnyConnect user receiving the AnyConnect prompt in the exhibit? (Choose two.)

QUESTION 32
Refer to the exhibit.

Cisco AnyConnect must be set up on a router to allow users to access internal servers 192.168.0.10 and 192.168.0.11. All other traffic should go out of the client’s local NIC. Which command accomplishes this configuration?

QUESTION 33
What uses an Elliptic Curve key exchange algorithm?

QUESTION 34
An administrator must guarantee that remote access users are able to reach printers on their local LAN after a VPN session is established to the headquarters. All other traffic should be sent over the tunnel. Which split-tunnel policy reduces the configuration on the ASA headend?

QUESTION 35
Refer to the exhibit.

A network engineer is reconfiguring clientless SSLVPN during a maintenance window, and after testing the new configuration, is unable to establish the connection. What must be done to remediate this problem?

QUESTION 36
An administrator is planning a VPN configuration that will encrypt traffic between multiple servers that will be passing unicast and multicast traffic. This configuration must be able to be implemented without the need to modify routing within the network. Which VPN technology must be used for this task?

QUESTION 37
Which benefit of FlexVPN is a limitation of DMVPN using IKEv1?

QUESTION 38
A user is trying to log in to a Cisco ASA using the clientless SSLVPN feature and receives the error message “clientless (browser) SSLVPN access is not allowed”. Which step should the Cisco ASA administrator take to resolve this issue?

QUESTION 39
Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?

QUESTION 40
A Cisco ASA is configured in active/standby mode. What is needed to ensure that Cisco AnyConnect users can connect after a failover event?

QUESTION 41
Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?

QUESTION 42

Refer to the exhibit. What is a result of this configuration?

QUESTION 43
In order to enable FlexVPN to use a AAA attribute list, which two tasks must be performed? (Choose two.)

QUESTION 44
Which technology is used to send multicast traffic over a site-to-site VPN?

QUESTION 45
Refer to the exhibit.

Based on the configuration output, what is the VPN technology?