nerdexam
Cisco

300-730 · Question #107

A network engineer must expand a company's Cisco AnyConnect solution. Currently, a Cisco ASA is set up in North America and another will be installed in Europe with a different IP address. Users shoul

The correct answer is D. Optimal Gateway Selection. AnyConnect Optimal Gateway Selection enables clients to probe multiple headends and automatically connect to the one with the lowest measured round trip time, making it the correct choice for geographically distributed ASAs.

Remote Access VPN

Question

A network engineer must expand a company's Cisco AnyConnect solution. Currently, a Cisco ASA is set up in North America and another will be installed in Europe with a different IP address. Users should connect to the ASA that has the lowest Round Trip Time from their network location as measured by the AnyConnect client. Which solution must be implemented to meet this requirement?

Options

  • AVPN Load Balancing
  • BIP SLA
  • CDNS Load Balancing
  • DOptimal Gateway Selection

How the community answered

(59 responses)
  • A
    5% (3)
  • B
    3% (2)
  • C
    14% (8)
  • D
    78% (46)

Why each option

AnyConnect Optimal Gateway Selection enables clients to probe multiple headends and automatically connect to the one with the lowest measured round trip time, making it the correct choice for geographically distributed ASAs.

AVPN Load Balancing

VPN Load Balancing distributes sessions across ASAs in the same cluster using a shared virtual IP address and does not measure client-side RTT or direct clients to geographically separate devices.

BIP SLA

IP SLA monitors network path quality from the ASA or router perspective for routing decisions; it does not measure RTT from AnyConnect clients to headends.

CDNS Load Balancing

DNS Load Balancing resolves a hostname to different IPs but does not perform client-side RTT measurement and cannot guarantee the lowest-latency connection for each user.

DOptimal Gateway SelectionCorrect

Optimal Gateway Selection is a built-in AnyConnect feature that uses client-initiated RTT probes to compare latency to configured headends and directs the user to the lowest-latency device. It is specifically designed for geographically distributed headends with different IP addresses. VPN Load Balancing cannot achieve this because it operates within a single cluster sharing a virtual IP, not across geographically distinct ASAs.

Concept tested: AnyConnect Optimal Gateway Selection for geographically distributed headends

Source: https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/guide/b_AnyConnect_Administrator_Guide_4-0/configure-vpn.html

Topics

#AnyConnect#Optimal Gateway Selection#RTT#gateway redundancy

Community Discussion

No community discussion yet for this question.

Full 300-730 Practice