Cisco Deploying Cisco ASA VPN Solutions (VPN v2.0) 認定 642-648 試験問題:

1. You are the network security administrator troubleshooting a clientless SSL VPN issue.
Users can connect using SSL VPN, but they cannot access file folder bookmarks that they need.
Which problem could possibly cause this issue?

A) misconfigured WebType ACLs
B) disabled content rewriting
C) a name mismatch from the certificate CN and the VPN URL
D) disabled portal features

2. Which four statements about the Advanced Endpoint Assessment are correct? (Choose four.)

A) It does not perform any remediation, but it provides input that can be evaluated by DAP records.
B) It examines the remote computer for antispyware applications.
C) It performs active remediation by applying rules, activating modules, and providing updates where applicable.
D) It examines the remote computer for personal firewall applications.
E) It examines the remote computer for malware applications.
F) It examines the remote computer for antivirus applications.

3. Refer to the exhibit.

A NOC engineer is in the process of entering information into the Create New VPN Connection Entry fields.
Which statement correctly describes how to do this?

A) In the Connection Entry field, enter the name of the connection profile as it is specified on the Cisco ASA appliance.
B) In the Name field, enter the name of the connection profile as it is specified on the Cisco ASA appliance.
C) In the Authentication tab, click the Group Authentication or Mutual Group Authentication radio button to enable symmetrical pre-shared key authentication.
D) In the Host field, enter the IP address of the remote client device.

4. You are the network security administrator. You receive a call from a user stating that he cannot log onto the network. In the process of troubleshooting, you determine that this user is accessing the network via certificate-based Cisco AnyConnect SSL VPN.
What is a troubleshooting step that you should perform to determine the cause of the access problem?

A) Check the WebACLs on the Cisco ASA.
B) Ask the user to use IPsec, and test the connection attempts.
C) Revoke and reissue the certificate, and have the user try again.
D) Verify that a connection can be made without using certificates.

5. Which three statements concerning keystroke logger detection are correct? (Choose three.)

A) It detects both hardware- and software-based keystroke loggers.
B) It allows the administrator to define "safe" keystroke logger applications.
C) It requires administrative privileges in order to run.
D) It runs on Windows and MAC OS X systems.
E) It detects loggers that run as a process or kernel module.

質問と回答：