nerdexam
Cisco

300-730 · Question #111

A network engineer is setting up a clientless SSLVPN on a Cisco ASA. Remote users must be able to access an internal webserver via the URL example.com. Which two steps accomplish this task? (Choose tw

The correct answer is A. Configure a bookmark for the webserver.. Clientless SSL VPN on a Cisco ASA requires a bookmark so that remote users have a portal link to the internal webserver, since the ASA proxies all traffic on the user's behalf.

Remote Access VPN

Question

A network engineer is setting up a clientless SSLVPN on a Cisco ASA. Remote users must be able to access an internal webserver via the URL example.com. Which two steps accomplish this task? (Choose two.)

Options

  • AConfigure a bookmark for the webserver.
  • BConfigure routing so that the user's computer can reach the webserver.
  • CConfigure a DNS server that can resolve the webserver URL.
  • DConfigure a browser plugin on the Cisco ASA.
  • EConfigure routing so that the Cisco ASA can reach the webserver.

How the community answered

(44 responses)
  • A
    75% (33)
  • B
    7% (3)
  • C
    2% (1)
  • D
    2% (1)
  • E
    14% (6)

Why each option

Clientless SSL VPN on a Cisco ASA requires a bookmark so that remote users have a portal link to the internal webserver, since the ASA proxies all traffic on the user's behalf.

AConfigure a bookmark for the webserver.Correct

In clientless SSL VPN, the ASA acts as a reverse proxy and users interact with internal resources entirely through the web portal. A bookmark (URL entry configured on the ASA) must be created so that users can click a link in the portal to initiate a proxied connection to the internal webserver. Without a bookmark or equivalent URL object, the resource is unreachable through the portal regardless of network reachability.

BConfigure routing so that the user's computer can reach the webserver.

Clientless SSL VPN proxies all connections through the ASA, so the user's computer never establishes a direct routed path to the internal webserver and a client-side route is not required.

CConfigure a DNS server that can resolve the webserver URL.

DNS resolution of the webserver URL must be available to the ASA itself so it can proxy the connection, not to the user's computer; this is an ASA-side infrastructure concern, not a distinct VPN configuration step.

DConfigure a browser plugin on the Cisco ASA.

Clientless SSL VPN is specifically designed to operate without any browser plugin or additional software on the user's machine; plugins are a characteristic of thin-client or full-tunnel VPN modes.

EConfigure routing so that the Cisco ASA can reach the webserver.

Basic IP reachability from the ASA to the internal webserver is a general network prerequisite that should already exist and is not a configuration step unique to enabling clientless SSL VPN access.

Concept tested: Clientless SSL VPN bookmark and portal configuration on ASA

Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/vpn/asa-96-vpn-config/vpn-webvpn.html

Topics

#clientless SSL VPN#bookmarks#DNS resolution#webserver URL

Community Discussion

No community discussion yet for this question.

Full 300-730 Practice