Online Access Free 642-648 Exam Questions

Your IT department needs to run a custom-built TCP application within the clientless SSL VPN tunnel. The network administrator suggests running the smart tunnel application.
Which three statements concerning smart tunnel applications are true? (Choose three.)

• A.They require the modification of the Host file on the end-user PC.
• B.They support active FTP and other RTSP-based applications.
• C.They do not require administrator privileges on the remote system.
• D.They are supported on Windows and MAC OS X platforms.
• E.They support native client applications over SSL VPN.
• F.They require the enabling of port forwarding.

Refer to the exhibit.

When an SSL VPN user, contractor1, enters https://192.168.4.2 (the outside address of the Cisco ASA appliance) into the browser, an SSL VPN Login screen appears.
In addition to the information that is contained in the Cisco ASDM configuration screens, what can an administrator determine about the state of the connection after the user clicks the Login button?

• A.The login will fail.
• B.The user will be presented with a clientless VPN portal page.
• C.The user login will succeed, but the user will be connected to the "contractor" tunnel group.
• D.The user login will succeed, and an IP address of 10.0.4.120 will be assigned.

In a remote-access VPN solution, on which device or devices can dead peer detection be configured?

• A.headend device
• B.both headend and remote devices
• C.remote device
• D.Dead peer detection can be configured only on site-to-site VPN.

An engineer, while working at a home office, wants to launch the Cisco AnyConnect Client to the corporate offices while simultaneously printing network designs on the home network.
Without allowing access to the Internet, what are the two best ways for the administrator to configure this application? (Choose two.)

• A.Select the Tunnel Network List Below policy.
• B.Configure an extended access list and apply it to the network list.
• C.Configure an exempted network list.
• D.Select the Tunnel All Networks policy.
• E.Select the Exclude Network List Below policy.
• F.Configure a standard access list and apply it to the network list.

Which Cisco ASA SSL VPN feature provides support for PCI compliance by allowing for the validation of two sets of username and password credentials on the SSL VPN login page?

• A.RSA OTP
• B.Certificate to Profile Mapping
• C.Single Sign-On
• D.Double Authentication