Use LEFT and RIGHT arrow keys to navigate between flashcards;
Use UP and DOWN arrow keys to flip the card;
H to show hint;
A reads text to speech;
10 Cards in this Set
- Front
- Back
|
Which SSL solution is most appropriate for a remote user who is at a borrowed computerand needs access to a single server at the central office?
a. SSL thin client b. SSL clientless VPN c. Cisco AnyConnect Secure Mobility Client SSL VPN client d. IPsec VPN client |
SSL Clientless VPN
|
|
|
Which of the following solutions assigns a virtual IP address to the remote user to usefor traffic sent over the SSL VPN to the server?
a. SSL thin client b. SSL clientless VPN c. Cisco AnyConnect Secure Mobility Client d. IPsec VPN client |
Cisco AnyConnect Secure Mobility Client
|
|
|
What is the immediate cost savings when implementing SSL VPNs?
a. No licensing is required on the server. b. No licensing is required on the clients. c. Easy deployment. d. SSL VPN licenses are significantly less expensive on the server than IPseclicenses. |
Easy Deployment
|
|
|
How does an SSL client send the desired shared secret to the server?
a. AES. b. Encrypts it with the server’s public key. c. Encrypts it with the sender’s public key. d. They use DH to negotiate the shared secret. |
Encrypts it with the server’s public key.
|
|
|
Which of the following is not part of configuring the clientless SSL VPN on the ASA?
a. Launching the wizard b. Specifying the URL c. Configuring bookmarks d. Configuring a pool of IP addresses for the remote users to use |
Configuring a pool of IP addresses for the remote users to use
|
|
|
What may be the potential problem when enabling SSL VPNs on an interface on theASA?
a. ASDM is now disabled on that interface. b. ASDM must be additionally configured with a custom port. c. ASDM must be used with a different URL. d. ASDM is not affected because it does not connect on port TCP:443. |
ASDM must be used with a different URL.
|
|
|
Which of the following steps is configured when setting up Cisco AnyConnect SecureMobility Client on the ASA that would not be configured for clientless SSL VPN?(Choose all that apply.)
a. NAT exemption b. Pool of addresses c. Connection profile d. Authentication method |
NAT exemption and a pool of addresses
|
|
|
Where does the ASA keep the copy of the Cisco AnyConnect Secure Mobility Clientthat may be deployed down to the client?
a. On an HTTPS server only b. On flash c. On an SFTP server only d. On NVRAM |
On flash
|
|
|
Which of the following are common issues that users experience when they cannotsend or receive IP traffic over an SSL VPN tunnel? (Choose all that apply).a. Routing issues behind the ASAb. Access control lists blocking trafficc. Too much traffic for the VPN tunnel sized. Network Address Translation not being bypassed for VPN traffic
|
a. Routing issues behind the ASAb. Access control lists blocking trafficd. Network Address Translation not being bypassed for VPN traffic
|
|
|
What is a major benefit of SSL VPNs?
|
Easy to deploy because all major browsers support it.
|
