nerdexam
Cisco

300-730 · Question #80

Refer to the exhibit. Which type of VPN is used? tunnel-group client general-attributes address-pool MYPOOL authentication-server-group RADIUS tunnel-group client ipsec-attributes pre-shared-key…

The correct answer is C. Cisco Easy VPN. The presence of 'ipsec-attributes' with a 'pre-shared-key' and a client address pool on the tunnel-group identifies this as a Cisco Easy VPN (IPsec remote access) configuration.

Remote Access VPN

Question

Refer to the exhibit. Which type of VPN is used? tunnel-group client general-attributes address-pool MYPOOL authentication-server-group RADIUS tunnel-group client ipsec-attributes pre-shared-key test123

Options

  • AGETVPN
  • Bclientless SSL VPN
  • CCisco Easy VPN
  • DCisco AnyConnect SSL VPN

How the community answered

(30 responses)
  • A
    3% (1)
  • C
    93% (28)
  • D
    3% (1)

Why each option

The presence of 'ipsec-attributes' with a 'pre-shared-key' and a client address pool on the tunnel-group identifies this as a Cisco Easy VPN (IPsec remote access) configuration.

AGETVPN

GETVPN is a group-encrypted transport VPN used for site-to-site encryption in MPLS networks - it uses a Key Server and group members, not client address pools or pre-shared-key tunnel-groups.

Bclientless SSL VPN

Clientless SSL VPN uses 'webvpn' configuration blocks and browser-based access - there is no IPsec or pre-shared-key involved.

CCisco Easy VPNCorrect

Cisco Easy VPN (EzVPN) uses IPsec with pre-shared keys for remote access clients connecting to an ASA or IOS Easy VPN Server. The tunnel-group with 'ipsec-attributes pre-shared-key' and a client address pool is the exact CLI signature of Easy VPN server configuration. Easy VPN also supports RADIUS-based authentication via 'authentication-server-group', as shown in this snippet.

DCisco AnyConnect SSL VPN

AnyConnect SSL VPN uses SSL/TLS and would show 'ssl-client' or 'anyconnect' protocol attributes, not 'ipsec-attributes' with a pre-shared-key.

Concept tested: Identifying Cisco Easy VPN configuration elements

Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/vpn/asa-96-vpn-config/vpn-easy-vpn-server.html

Topics

#Easy VPN#IPsec remote access#tunnel group#preshared key

Community Discussion

No community discussion yet for this question.

Full 300-730 Practice