300-209 試験問題を無料オンラインアクセス

Drag and drop the steps on the left into the correct order of DMVPN process execution for quick mode exchange on the right.

正解：

A Cisco AnyConnect VPN user receives this message every 30 minutes:
Secure VPN Connection terminated locally by the Client. Reason 426: Maximum Configured Lifetime Exceeded Which configuration changes on the ASA firewall address this issue?

• A.ASA(config)#clear crypto ipsec sa
• B.ASA(config)# isakmp policy 1 lifetime 1800
• C.ASA(config)# isakmp policy 1 lifetime 0
• D.ASA(config)# clear crypto isakmp sa

Which way send OSPF routing updates over a site-to-site IPsec tunnel is true?

• A.Set the network type for the inside interface to nonbroadcast mode. and add the remote end as an OSPF neighbor
• B.Set the network type for the DMZ interface to nonbroadcast mode. and add the headend as an OSPF neighbnr
• C.Set the network type for the outside interface to nonbroadcast mode , and add the remote end as an OSPF neighbor
• D.Set the network type for the outside interface to broadcast mode , and add the headend device as an OSPF neighbor

Which option is a benefit of ECC as compared to public key cryptography?

• A.improves security by using a large key size
• B.increases speed by using a small key
• C.increases speed by using many algorithm methods
• D.improves security by using many keys

An engineer is configuring clientless SSL VPN . The finance department has a database server that only they should access,but the sales department can currently access it ,The finance and the sales departments are configured as separate group-policies.Which option must be added to the configuration to make sure the users in the sales department cannot access the finance department server?

• A.port forwarding
• B.tunnel group lock
• C.Webtype ACL
• D.VPN filter ACL