Ensurepass    QUESTION 141 Which three statements about LDAP are true? (Choose three.)   A.        LDAP uses UDP port 389 by default. B.        LDAP is defined in terms of ASN.1 and transmitted using BER. C.        LDAP is used for accessing X.500 directory services. D.        An LDAP directory entry is uniquely identified by its DN. E.         Read more [...]
Ensurepass  QUESTION 121 Which two options best describe the authorization process as it relates to network access? (Choose two.)   A.        the process of identifying the validity of a certificate, and validating specific fields in the certificate against an identity store B.        the process of providing network access to the end user C.        applying enforcement controls, such Read more [...]
Ensurepass  QUESTION 111 What type of attack consists of injecting traffic that is marked with the DSCP value of EF into the network?   A.        brute-force attack B.        QoS marking attack C.        DHCP starvation attack D.        SYN flood attack   Answer: B     QUESTION 112 Which statement is true regarding Cisco ASA operations Read more [...]
Ensurepass    QUESTION 91 Which three statements are true about PIM-SM operations? (Choose three.)   A.        PIM-SM supports RP configuration using static RP, Auto-RP, or BSR. B.        PIM-SM uses a shared tree that is rooted at the multicast source. C.        Different RPs can be configured for different multicast groups to increase RP scalability. D.        Read more [...]
Ensurepass  QUESTION 81 Which of the following provides the features of route summarization, assignment of contiguous blocks of addresses, and combining routes for multiple classful networks into a single route?   A.        classless interdomain routing B.        route summarization C.        supernetting D.       private IP addressing   Answer: A   Read more [...]
Ensurepass  QUESTION 71 With the Cisco FlexVPN solution, which four VPN deployments are supported? (Choose four.)   A.        site-to-site IPsec tunnels? B.        dynamic spoke-to-spoke IPSec tunnels? (partial mesh) C.        remote access from software or hardware IPsec clients? D.       distributed full mesh IPsec tunnels? E.        Read more [...]
Ensurepass  QUESTION 61 Refer to the exhibit. Which statement best describes the problem?     A.        Context vpn1 is not inservice. B.        There is no gateway that is configured under context vpn1. C.        The config has not been properly updated for context vpn1. D.        The gateway that is configured under context vpn1 is not inservice. Read more [...]
EnsurepassQUESTION 51 Troubleshooting the web authentication fallback feature on a Cisco Catalyst switch shows that clients with the 802.1X supplicant are able to authenticate, but clients without the supplicant are not able to use web authentication. Which configuration option will correct this issue?   A.        switch(config)# aaa accounting auth-proxy default start-stop group radius B.        switch(config-if)# authentication Read more [...]
Ensurepass  QUESTION 41 Which Cisco ASA feature can be used to update non-compliant antivirus/antispyware definition files on an AnyConnect client?   A.        dynamic access policies B.        dynamic access policies with Host Scan and advanced endpoint assessment C.        Cisco Secure Desktop D.        advanced endpoint assessment   Answer: Read more [...]