Cisco Deploying Cisco ASA VPN Solutions (VPN v2.0) Sample Questions:

1. Refer to the exhibit.

When you are testing SSL VPN in a non-production environment, certain variables in the Cisco ASDM session details can be viewed or changed under Configuration > AnyConnect Connection Profiles.
Which parameter can be viewed or changed in the AnyConnect Connection Profiles?

A) Assigned IP address 10.0.1.50
B) Authentication ModE. Certificate and User Password
C) Client Ver: Cisco AnyConnect VPN Agent for Windows
D) Client TypE. SSL VPN Client

2. A temporary worker must use clientless SSL VPN with an SSH plug-in, in order to access the console of an internal corporate server, the projects.xyz.com server. For security reasons, the network security auditor insists that the temporary user is restricted to the one internal corporate server, 10.0.4.18. You are the network engineer who is responsible for the network access of the temporary user.
What should you do to restrict SSH access to the one projects.xyz.com server?

A) Configure access-list temp_user_acl extended permit TCP any host 10.0.4.18 eq 22.
B) Configure a plug-in SSH bookmark for host 10.0.4.18, and disable network browsing on the clientless SSL VPN portal of the temporary worker.
C) Configure access-list temp_user_acl standard permit host 10.0.4.18 eq 22.
D) Configure access-list temp_acl webtype permit url ssh://10.0.4.18.

3. When establishing a Cisco AnyConnect SSL VPN tunnel, a system administrator wants to restrict remote home office users to either print to their local printer or send the remaining traffic down the Cisco AnyConnect SSL VPN tunnel (with restricted Internet access).
Choose both a tunnel policy option and an ACL type to accomplish this design goal.
(Choose two.)

A) tunnel network list below
B) tunnel all networks
C) web ACL
D) exclude network list from the tunnel
E) standard ACL
F) extended ACL

4. Refer to the exhibit.

A junior network engineer configured the corporate Cisco ASA appliance to accommodate a new temporary worker. For security reasons, the IT department wants to restrict the internal network access of the new temporary worker to the corporate server, with an IP address of 10.0.4.10. After the junior network engineer finished the configuration, an IT security specialist tested the account of the temporary worker. The tester was able to access the URLs of additional secure servers from the WebVPN user account of the temporary worker.
What did the junior network engineer configure incorrectly?

A) Network browsing was not restricted on the temporary worker user policy.
B) The ACL was applied incorrectly or was not applied.
C) The ACL was configured incorrectly.
D) Network browsing was not restricted on the temporary worker group policy.

5. Refer to the exhibit.

A network administrator is duplicating a VPN client profile to send out to all members of the finance group. Three parameters might have been configured incorrectly. For each three letters, choose the correct answer. (Choose three.)

A) B-Pre-Shared Keys Authentication Type
B) C-Save Password disabled
C) C-Save Password enabled
D) B-Digital Certificate Authentication Type
E) A-Remote Client IP Address
F) A-ASA Outside Interface IP Address

Solutions: