单选题A route-based VPN is required for which scenario? （）A when the remote VPN peer is behind a NAT deviceB when multiple networks need to be reached across the tunnelC when the remote VPN peer is a dialup or remote access clientD when a dynamic routing pro

第1题：

Which VPN management feature would be considered to ensure that the network had the leastdisruption of service when making topology changes？（）

• A、 dynamic reconfiguration
• B、 path MTU discovery
• C、 auto setup
• D、 remote management

第2题：

When using the Cisco SDM Quick Setup Siteto-Site VPN wizard， which three parameters do you configure？（）

• A、Source interface where encrypted traffic originates
• B、IP address for the remote peer
• C、Transform set for the IPsec tunnel
• D、Interface for the VPN connection

第3题：

第4题：

Which VPN management feature would be considered to ensure that the network had the least disruption of service when making topology changes?（）

• A、dynamic reconfiguration
• B、path MTU discovery
• C、auto setup
• D、remote management

第5题：

You have a VPN server named Server1 and a file server named Server2. Both servers run Windows Server 2003 Service Pack 2 (SP2). VPN clients report that they cannot access shares on Server2 after connecting to Server1. You confirm that VPN clients receive the appropriate IP configurations and that they have permissions to the shared folders on Server2. You need to ensure that VPN clients can access the shares on Server2 when they connect to the network by using a VPN connection.  What should you do? （）

• A、From the Routing and Remote Access snap-in on Server2， enable IP Routing.
• B、From the Routing and Remote Access snap-in on Server2， enable Link Control Protocol （LCP） extensions.
• C、From Utility Manager on Server1， enable the Start automatically when I log on option.
• D、In the local security policy on Server2， configure the Network Access： Shares that can be accessed anonymously setting.

第6题：

When designing remote access to the Enterprise Campus network for teleworkers and mobileworkers， which of the following should the designer consider？（）

• A、 It is recommended to place the VPN termination device in line with the Enterprise Edge 1
• B、 Maintaining access rules， based on the source IP of the client， on an internal firewall drawnfrom a headend RADIUS server is the most secure deployment
• C、 VPN Headend routing using Reverse Route Injection （RRI） with distribution is recommended when the remote user community is small and dedicated DHCP scopes are in place
• D、 Clientless SSL VPNs provide more granular access control than SSL VPN clients （thin or thick），including at Layer 7

第7题：

A route-based VPN is required for which scenario? （）

• A、when the remote VPN peer is behind a NAT device
• B、when multiple networks need to be reached across the tunnel
• C、when the remote VPN peer is a dialup or remote access client
• D、when a dynamic routing protocol such as OSPF is required across the VPN

第8题：

第9题：

A policy-based IPsec VPN is ideal for which scenario？（）

• A、when you want to conserve tunnel resources
• B、when the remote peer is a dialup or remote access client
• C、when you want to configure a tunnel policy with an action of deny
• D、when a dynamic routing protocol such as OSPF must be sent across the VPN

第10题：

When configuring a Cisco Adaptive Security Appliance in multiple context mode， which of the follow capabilities are supported？（）

• A、 Multicastis supported
• B、 Dynamic routing protocols are supported
• C、 VPN configurations are supported
• D、 Static routes are supported