300-730 · Question #80
Refer to the exhibit. Which type of VPN is used? tunnel-group client general-attributes address-pool MYPOOL authentication-server-group RADIUS tunnel-group client ipsec-attributes pre-shared-key…
The correct answer is C. Cisco Easy VPN. The presence of 'ipsec-attributes' with a 'pre-shared-key' and a client address pool on the tunnel-group identifies this as a Cisco Easy VPN (IPsec remote access) configuration.
Question
Options
- AGETVPN
- Bclientless SSL VPN
- CCisco Easy VPN
- DCisco AnyConnect SSL VPN
How the community answered
(30 responses)- A3% (1)
- C93% (28)
- D3% (1)
Why each option
The presence of 'ipsec-attributes' with a 'pre-shared-key' and a client address pool on the tunnel-group identifies this as a Cisco Easy VPN (IPsec remote access) configuration.
GETVPN is a group-encrypted transport VPN used for site-to-site encryption in MPLS networks - it uses a Key Server and group members, not client address pools or pre-shared-key tunnel-groups.
Clientless SSL VPN uses 'webvpn' configuration blocks and browser-based access - there is no IPsec or pre-shared-key involved.
Cisco Easy VPN (EzVPN) uses IPsec with pre-shared keys for remote access clients connecting to an ASA or IOS Easy VPN Server. The tunnel-group with 'ipsec-attributes pre-shared-key' and a client address pool is the exact CLI signature of Easy VPN server configuration. Easy VPN also supports RADIUS-based authentication via 'authentication-server-group', as shown in this snippet.
AnyConnect SSL VPN uses SSL/TLS and would show 'ssl-client' or 'anyconnect' protocol attributes, not 'ipsec-attributes' with a pre-shared-key.
Concept tested: Identifying Cisco Easy VPN configuration elements
Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/vpn/asa-96-vpn-config/vpn-easy-vpn-server.html
Topics
Community Discussion
No community discussion yet for this question.