Weekend Sale - Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sntaclus

Refer to the exhibit.

Upon setting up a tunnel between two sites, users are complaining that connections to applications over the VPN are not working consistently. The output of show crypto ipsec sa was collected on one of the VPN devices. Based on this output, what should be done to fix this issue?

A.

Lower the tunnel MTU.

B.

Enable perfect forward secrecy.

C.

Specify the application networks in the remote identity.

D.

Make an adjustment to IPSec replay window.

An engineer has successfully established a Phase 1 and Phase 2 tunnel between two sites. Site A has internal subnet 192.168.0.0/24 and Site B has internal subnet 10.0.0.0/24. The engineer notices that no packets are decrypted at Site B. Pings to 192.168.0.1 from internal Site B devices make it to the Site B router, and the Site A router has incrementing encrypt and decrypt counters. What must be done to ensure bidirectional communication between both sites?

A.

Modify the routing at Site B so that traffic is sent to Site A.

B.

Configure the correct DH group on both devices.

C.

Allow protocol ESP or AH on the firewall in front of the Site B router.

D.

Enable PFS on the headend device.

Which Cisco AnyConnect component ensures that devices in a specific internal subnet are only accessible using port 443?

A.

routing

B.

WebACL

C.

split tunnel

D.

VPN filter

An engineer has configured Cisco AnyConnect VPN using IKEv2 on a Cisco IOS router. The user cannot connect in the Cisco AnyConnect client, but receives an alert message "Use a browser to gain access." Which action does the engineer take to resolve this issue?

A.

Reset user login credentials.

B.

Correct the URL address.

C.

Connect using HTTPS.

D.

Disable the HTTP server.