Q36. Which two NHRP functions are specific to DMVPN Phase 3 implementation? (Choose two.)

Q37. Drag and drop the code snippets from the right onto the blanks in the configuration to implement FlexVPN. Not all snippets are used.

Q38. Which two features provide headend resiliency for Cisco AnyConnect clients? (Choose two.)

Q39. A company is setting up a dynamic crypto map on the Cisco ASA at the headquarters to accept connections from the branch offices. There will be no IP subnet overlap between the branch offices, but the engineer does not know which encryption domains will be requested by the branch offices. Additionally, the company security policy states that routing protocol traffic should not leave the HQ network. Which solution should be used to route traffic back to the branches from the Cisco ASA with minimal administrative effort?

Q40. Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?

Q41. What are two purposes of the key server in Cisco IOS GETVPN? (Choose two.)

Q42. Refer to the exhibit.

An engineer is building an IKEv1 tunnel to a peer Cisco ASA, but the tunnel is failing. Based on the configuration in the exhibit, which action must be taken to allow the VPN tunnel to come up?

Q43. Refer to the exhibit.

Cisco AnyConnect must be set up on a router to allow users to access internal servers 192.168.0.10 and 192.168.0.11. All other traffic should go out of the client’s local NIC. Which command accomplishes this configuration?

Q44. Refer to the exhibit.

Which type of mismatch is causing the problem with the IPsec VPN tunnel?

Q45. Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list? (Choose two.)

Q46. An engineer notices that while an employee is connected remotely, all traffic is being routed to the corporate network. Which split-tunnel policy allows a remote client to use their local provider for Internet access when working from home?

Q47.

Refer to the exhibit. Which type of mismatch is causing the problem with the IPsec VPN tunnel?

Q48. Which two protocols does DMVPN leverage to build dynamic VPNs to multiple destinations? (Choose two.)

Q49. What are two functions of ECDH and ECDSA? (Choose two.)

Q50. Which two features provide headend resiliency for Cisco AnyConnect clients? (Choose two.)

Q51.

Refer to the exhibit. The customer can establish a Cisco AnyConnect connection without using an XML profile. When the host “ikev2” is selected in the AnyConnect drop down, the connection fails. What is the cause of this issue?

Q52. An administrator is designing a VPN with a partner’s non-Cisco VPN solution. The partner’s VPN device will negotiate an IKEv2 tunnel that will only encrypt subnets 192.168.0.0/24 going to 10.0.0.0/24. Which technology must be used to meet these requirements?