642-648 試験問題を無料オンラインアクセス

Refer to the exhibit.

A new NOC engineer, while viewing a real-time log from an SSL VPN tunnel, has a question about a line in the log.
The IP address 172.26.26.30 is attached to which interface in the network?

• A.the physical interface of the end user
• B.the Cisco ASA physical interface
• C.the SSL VPN tunnel interface of the end user
• D.the Cisco ASA SSL VPN tunnel interface

Refer to the exhibit.

Which two statements are correct regarding these two Cisco ASA clientless SSL VPN bookmarks? (Choose two.)

• A.CSCO_WEBVPN_USERNAME is a user attribute.
• B.The CSCO_SSO=1 parameter enables SSO for the SSH plug-in.
• C.CSCO_SSO is a Cisco predefined variable that is used for macro substitution.
• D.The CSCO_WEBVPN_USERNAME variable is enabled by using the Post SSO plug-in.
• E.CSCO_WEBVPN_USERNAME is a Cisco predefined variable that is used for macro substitution.
• F.The CSCO_SSO variable is enabled by using the Post SSO plug-in.

In which three ways can a Cisco ASA security appliance obtain a certificate revocation list?
(Choose three.)

• A.HTTP
• B.SCP
• C.SCEP
• D.TFTP
• E.FTP
• F.LDAP

Refer to the exhibit.

You are configuring a laptop with the Cisco VPN Client, which uses digital certificates for authentication.
Which protocol does the Cisco VPN Client use to retrieve the digital certificate from the CA server?

• A.SCEP
• B.HTTPS
• C.FTP
• D.OCSP
• E.LDAP

Refer to the exhibit.

After being with the company for more than six months, Sue is no longer considered a new hire employee. In converting her from a new hire to a full-time employee, her SSL VPN address will change from the "Client requested address 10.0.4.120" to a random address from the employee address pool.
To "disable" the 10.0.4.120 IP address, the network administrator should navigate to which Cisco ASDM pane?

• A.Connection Profile
• B.Group Policies
• C.Local Users
• D.Address Pools