Online Access Free 642-648 Practice Test

DRAG DROP

Correct Answer:

Explanation:
Protects Peer Identity
D-H group 1-Default
Supports dynamically addressed peers using PSK
D-H Group 2-Default
IPSec Session Keys
IPSec SA

You are configuring bookmarks for the clientless SSL VPN portal without the use of plug- ins.
Which three bookmark types are supported? (Choose three.)

• A.RDP
• B.HTTP
• C.CIFS
• D.Telnet
• E.FTP
• F.SSH

Refer to the exhibit.

Which two statements are correct regarding these two Cisco ASA clientless SSL VPN bookmarks? (Choose two.)

• A.The CSCO_SSO variable is enabled by using the Post SSO plug-in.
• B.The CSCO_WEBVPN_USERNAME variable is enabled by using the Post SSO plug-in.
• C.CSCO_WEBVPN_USERNAME is a Cisco predefined variable that is used for macro substitution.
• D.The CSCO_SSO=1 parameter enables SSO for the SSH plug-in.
• E.CSCO_WEBVPN_USERNAME is a user attribute.
• F.CSCO_SSO is a Cisco predefined variable that is used for macro substitution.

Which statement is correct regarding IKEv2 when implementing IPsec site-to-site VPNs?

• A.IKEv2 crypto maps can be configured to inherit IKEv1 parameters, if configured.
• B.IKEv2 should be configured with a higher priority over IKEv1 policies within the same tunnel group.
• C.IKEv2 can be configured to support multiple peers.
• D.IKE v1 and IKEv2 can coexist in the same tunnel group, with fallback to IKEv1 if the remote endpoint does not support IKEv2.

Which two statements about the Cisco ASA cluster load-balancing feature are correct?
(Choose two.)

• A.The Cisco ASA load-balances IPsec VPN, clientless, and Cisco AnyConnect SSL VPN tunnels.
• B.The Cisco ASA load-balances remote-access VPN tunnels only.
• C.The Cisco ASA load-balances IPsec VPN and Cisco AnyConnect SSL VPN tunnels only.
• D.The Cisco ASA load-balances IPsec VPN tunnels only.
• E.The Cisco ASA load-balances both site-to-site and remote-access VPN tunnels.