QUESTION 151
Refer to the exhibit. Which type of mismatch is causing the problem with the IPsec VPN tunnel?

QUESTION 152
An administrator is deciding which authentication protocol should be implemented for their upcoming Cisco AnyConnect deployment. A list of the security requirements from upper management are: the ability to force AnyConnect users to use complex passwords such as C1$c0451035084!, warn users a few days before their password expires, and allow users to change their password during a remote access session. Which authentication protocol must be used to meet these requirements?

QUESTION 153
Refer to the exhibit. Which two tunnel types produce the show crypto ipsec sa output seen in the exhibit? (Choose two.)

QUESTION 154
Refer to the exhibit. Which two tunnel types produce the show crypto ipsec sa output seen in the exhibit? (Choose two.)

QUESTION 155
Refer to the exhibit.

Which two commands under the tunnel-group webvpn-attributes result in a Cisco AnyConnect user receiving the AnyConnect prompt in the exhibit? (Choose two.)

QUESTION 156
What uses an Elliptic Curve key exchange algorithm?

QUESTION 157
Refer to the exhibit.

Which value must be configured in the User Group field when the Cisco AnyConnect Profile is created to connect to an ASA headend with IPsec as the primary protocol?

QUESTION 158
Which VPN technology must be used to ensure that routers are able to dynamically form connections with each other rather than sending traffic through a hub and be able to advertise routes without the use of a dynamic routing protocol?

QUESTION 159
Refer to the exhibit.

The customer can establish a Cisco AnyConnect connection without using an XML profile. When the host “ikev2” is selected in the AnyConnect drop down, the connection fails. What is the cause of this issue?

QUESTION 160
An engineer is troubleshooting a new DMVPN setup on a Cisco IOS router. After the show crypto isakmp sa command is issued, a response is returned of “MM_NO_STATE.” Why does this failure occur?

QUESTION 161
An engineer has successfully established a Phase 1 and Phase 2 tunnel between two sites. Site A has internal subnet 192.168.0.0/24 and Site B has internal subnet 10.0.0.0/24. The engineer notices that no packets are decrypted at Site B. Pings to 192.168.0.1 from internal Site B devices make it to the Site B router, and the Site A router has incrementing encrypt and decrypt counters. What must be done to ensure bidirectional communication between both sites?

QUESTION 162
Refer to the exhibit. A network engineer is reconfiguring clientless SSLVPN during a maintenance window, and after testing the new configuration, is unable to establish the connection. What must be done to remediate this problem?

QUESTION 163
What uses an Elliptic Curve key exchange algorithm?

QUESTION 164
Which two commands help determine why the NHRP registration process is not being completed even after the IPsec tunnel is up? (Choose two.)

QUESTION 165
Which DMVPN feature allows spokes to be deployed with dynamically assigned public IP addresses?

QUESTION 166
An administrator is setting up Cisco AnyConnect on a Cisco ASA with the requirement that AnyConnect automatically establishes a VPN when a company-owned laptop is connected to the internet outside of the corporate network. Which configuration meets these requirements?

QUESTION 167
An engineer configured a Secure Client IKEV2 connection. The connection often fails without a specific sequence. During debugging a Diffie-Hellman group mismatch or a similar false negative is indicated.
Which action resolves the issue?

QUESTION 168
Refer to the exhibit. The customer can establish an AnyConnect connection on the first attempt only. Subsequent attempts fail. What might be the issue?

QUESTION 169
Which technology and VPN component allows a VPN headend to dynamically learn post NAT IP addresses of remote routers at different sites?