Exam 27: Automating Cisco Security Solutions (SAUTO)

A network engineer must design a remote access solution to allow contractors to access internal servers. These contractors do not have permissions to install applications on their computers. Which VPN solution should be used in this design?

Which feature of GETVPN is a limitation of DMVPN and FlexVPN?

Under which section must a bookmark or URL list be configured on a Cisco ASA to be available for clientless SSLVPN users?

Which parameter is initially used to elect the primary key server from a group of key servers?

Which benefit of FlexVPN is a limitation of DMVPN using IKEv1?

After a user configures a connection profile with a bookmark list and tests the clientless SSLVPN connection, all of the bookmarks are grayed out. What must be done to correct this behavior?

In a FlexVPN deployment, the spokes successfully connect to the hub, but spoke-to-spoke tunnels do not form. Which troubleshooting step solves the issue?

Refer to the exhibit. The DMVPN spoke is not establishing a session with the hub. Which two actions resolve this issue? (Choose two.)

Which two types of web resources or protocols are enabled by default on the Cisco ASA Clientless SSL VPN portal? (Choose two.)

Cisco AnyConnect clients need to transfer large files over the VPN sessions. Which protocol provides the best throughput?

Which configuration construct must be used in a FlexVPN tunnel?

Refer to the exhibit. Which two conclusions should be drawn from the DMVPN phase 2 configuration? (Choose two.)

Which technology is used to send multicast traffic over a site-to-site VPN?

Which two features are valid backup options for an IOS FlexVPN client? (Choose two.)

Refer to the exhibit. Client 1 cannot communicate with client 2. Both clients are using Cisco AnyConnect and have established a successful SSL VPN connection to the hub ASA. Which command on the ASA is missing?

An engineer is configuring clientless SSL VPN. The finance department has a database server that only they should access, but the sales department can currently access it. The finance and the sales departments are configured as separate group-policies. What must be added to the configuration to make sure the users in the sales department cannot access the finance department server?

Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list? (Choose two.)

Refer to the exhibit. The IKEv2 site-to-site VPN tunnel between two routers is down. Based on the debug output, which type of mismatch is the problem?

A Cisco ASA is configured in active/standby mode. What is needed to ensure that Cisco AnyConnect users can connect after a failover event?

Refer to the exhibit. What is a result of this configuration?