642-648 무료 덤프문제 온라인 액세스

Refer to the exhibit.

A NOC engineer needs to tune some postlogin parameters on an SSL VPN tunnel.
From the information shown, where should the engineer navigate to, in order to find all the postlogin session parameters?

• A."contractor" Connection Profile
• B.DefaultRAGroup Group Policy
• C."engineering" Group Policy
• D.DefaultWEBVPNGroup Group Policy
• E."engineer1" AAA/Local Users

After adding a remote-access IPsec tunnel via the VPN wizard, an administrator needs to tune the IPsec policy parameters. Where is the correct place to tune the IPsec policy parameters in Cisco ASDM?

• A.Crypto Map
• B.IPsec user profile
• C.IKE Policy
• D.IPsec Policy
• E.Group Policy

Refer to the exhibit.

In the CLI snippet that is shown, what is the function of the deny option in the access list?

• A.When set in conjunction with outbound connection-type answer-only, its function is to instruct the Cisco ASA to deny specific outbound traffic if it is not encrypted.
• B.When set in conjunction with connection-type originate-only, its function is to instruct the Cisco ASA to deny specific inbound traffic if it is not encrypted.
• C.When set in conjunction with connection-type originate-only, its function is to cause all IP traffic that matches the specified conditions to be protected by the crypto map.
• D.When set in conjunction with outbound connection-type bidirectional, its function is to prevent the specified traffic from being protected by the crypto map entry.

ABC Corporation has hired a temporary worker to help out with a new project. The network administrator gives you the task of restricting the internal clientless SSL VPN network access of the temporary worker to one server with the IP address of 172.26.26.50 via HTTP.
Which two actions should you take to complete the assignment? (Choose two.)

• A.Apply the access list to the temporary worker Group Policy.
• B.Configure access-list temp_acl webtype permit url http://172.26.26.50.
• C.Apply the access list to the outside interface in the inbound direction.
• D.Apply the access list to the temporary worker Connection Profile.
• E.Configure access-list temp_acl_stand_ACL standard permit host 172.26.26.50.
• F.Configure access-list temp_acl_extended extended permit http any host 172.26.26.50.

Refer to the exhibit.

A NOC engineer is in the process of entering information into the Create New VPN Connection Entry fields.
Which statement correctly describes how to do this?

• A.In the Host field, enter the IP address of the remote client device.
• B.In the Authentication tab, click the Group Authentication or Mutual Group Authentication radio button to enable symmetrical pre-shared key authentication.
• C.In the Connection Entry field, enter the name of the connection profile as it is specified on the Cisco ASA appliance.
• D.In the Name field, enter the name of the connection profile as it is specified on the Cisco ASA appliance.