Cisco Deploying Cisco ASA VPN Solutions (VPN v2.0) Sample Questions:
1. The LAN-to-LAN tunnel is not established, but an administrator can ping the remote Cisco ASA.
Which three IPsec LAN-to-LAN configuration parameters should the administrator verify at both ends of the tunnel? (Choose three.)
A) pre-shared key
B) crypto ACL destination IP address
C) crypto ACL source IP address
D) extended authentication username
E) tunnel connection-typE. originate or answer
F) extended authentication password
2. Refer to following Exhibit and answer the following question below:
The user, contractor1, will receive an IP address when the VPN connection is established.
Which statement regarding the IP address is true?
A) Is sourced from the management pool
B) Is a dedicated address (10.0.4.1 20)
C) Is sourced from the employee pool
D) Is sourced from the contractor pool
E) Is sourced from the engineering pool
3. Refer to the exhibit.
The "level_2" digital certificate was installed on a laptop.
What can cause an "invalid not active" status message?
A) The user has not clicked the Verify button within the Cisco VPN Client.
B) On first use, a CA server-supplied passphrase is entered to validate the certificate.
C) The CA server and laptop PC clocks are out of sync.
D) A "newly installed" digital certificate does not become active until it is validated by the peer device upon its first usage.
4. Refer to the exhibit.
While troubleshooting on a remote-access VPN application, a new NOC engineer received the message that is shown.
What is the most likely cause of the problem?
A) The IP address that is assigned to the PC of the VPN user is in the wrong subnet. The remote user needs to select a different host number within the correct subnet.
B) The IP address that is assigned to the PC of the VPN user is not within the range of addresses that are assigned to the SVC connection.
C) The IP address that is assigned to the PC of the VPN user is in use. The remote user needs to select a different host address within the range.
D) The IP address pool for contractors was not applied to their connection profile.
5. Refer to the exhibit.
While troubleshooting a remote-access application, a new NOC engineer received the logging message that is shown in the exhibit.
Which configuration is most likely to be mismatched?
A) IKE configuration
B) extended authentication configuration
C) IPsec configuration
D) digital certificate configuration
Solutions:
| Question # 1 Answer: A,B,C | Question # 2 Answer: D | Question # 3 Answer: C | Question # 4 Answer: D | Question # 5 Answer: C |
1088 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
