Online Access Free 642-648 Exam Questions

With SCEP enabled in a Cisco AnyConnect Connection Profile, what additional configuration step must you do when using Cisco ASA 8.4 software?

• A.Configure the profile to inherit the SCEP forwarding URL.
• B.Configure local authentication prior to the enrollment process.
• C.Configure the client to poll the CA for a response to the certificate request.
• D.Configure the location of the CA server.

A remote user who establishes a clientless SSL VPN session is presented with a web page. The administrator has the option to customize the "look and feel" of the page. What are three components of the VPN Customization Editor? (Choose three.)

• A.Portal page
• B.Logon page
• C.Home page
• D.Logout page
• E.Networking page
• F.Application page

When establishing a Cisco AnyConnect SSL VPN tunnel, a system administrator wants to restrict remote home office users to either print to their local printer or send the remaining traffic down the Cisco AnyConnect SSL VPN tunnel (with restricted Internet access).
Choose both a tunnel policy option and an ACL type to accomplish this design goal.
(Choose two.)

• A.web ACL
• B.tunnel all networks
• C.standard ACL
• D.extended ACL
• E.tunnel network list below
• F.exclude network list from the tunnel

Refer to the exhibit.

After a remote user established a Cisco AnyConnect session from a wireless card through the Cisco ASA appliance of a partner to a remote server, the user opened the Cisco AnyConnect VPN Client Statistics Details screen.
What are the two sources of the IP addresses that are marked A and B? (Choose two.)

• A.IP address that is assigned to the wireless Ethernet adapter of the remote user
• B.IP address of the Cisco ASA virtual HTTP server of the partner
• C.IP address of the default gateway router of the partner
• D.IP address of the default gateway router of the remote user
• E.IP address that is assigned to the remote user from the Cisco ASA address pool
• F.IP address of the Cisco ASA physical interface of the partner

Which statement about CRL configuration is correct?

• A.CRL checking is enabled by default.
• B.The Cisco Secure ACS can be configured as the CRL server.
• C.The Cisco ASA relies on LDAP access to procure the CRL list.
• D.The Cisco ASA relies on HTTPS access to procure the CRL list.