Exam 300-730 topic 1 question 116 discussion

Actual exam question from Cisco's 300-730

Question #: 116
Topic #: 1

An administrator is setting up a VPN on an ASA for users who need to access an internal RDP server. Due to security restrictions, the Microsoft RDP client is blocked from running on client workstations via Group Policy. Which VPN feature should be implemented by the administrator to allow these users to have access to the RDP server?

A. clientless proxy
B. smart tunneling
C. clientless plug-in
D. clientless rewriter

Show Suggested Answer

Suggested Answer: C 🗳️

by kylesam2017 at Dec. 24, 2023, 10:55 p.m.

Comments

Submit Cancel

ed81044

9 months ago

Selected Answer: C

Wow. This isn't rocket science.

upvoted 1 times

...

pfrank

10 months, 3 weeks ago

After reviewing this further, I think that B.) smart tunneling is the correct answer. Clientless Plug-ins would be appropriate if the Microsoft RDP wasn't blocked. CCNP Security SVPN 300-730 pg. 301

upvoted 1 times

pfrank

9 months, 1 week ago

A smart tunnel is a connection between a TCP-based application and a private site, using a clientless (browser-based) SSL VPN session with the security appliance as the pathway, and the adaptive security appliance as a proxy server. You can identify applications to which you want to grant smart tunnel access, and specify the local path to each application. For applications running on Microsoft Windows, you can also require a match of the SHA-1 hash of the checksum as a condition for granting smart tunnel access. https://community.cisco.com/t5/security-knowledge-base/asa-ssl-vpn-smart-tunnel/ta-p/3120099

upvoted 1 times

...

pfrank

11 months ago

C is the correct answer. CCNP Security SVPN 300-730 pg. 301, Configuring Client/Server Plug-ins. Client/server plug-ins allow administrators to extend the applications supported by a client-less SSL VPN to include applications such as RDP, VNC, Telnet, and SSH.

upvoted 2 times

...

Ivanyeung510

11 months, 2 weeks ago

C is the correct answer

upvoted 1 times

...

kylesam2017

11 months, 4 weeks ago

To allow users to access an internal RDP (Remote Desktop Protocol) server without running the Microsoft RDP client on client workstations, the appropriate VPN feature to implement is smart tunneling. Smart tunneling is a feature that enables the SSL VPN client to dynamically launch applications based on policies. In this case, it would allow users to access the RDP server without relying on the Microsoft RDP client being installed or running locally on their workstations. Smart tunneling provides a way to tunnel specific applications through the SSL VPN connection. Therefore, for the described scenario, the recommended VPN feature is smart tunneling.

upvoted 1 times

Ivanyeung510

11 months, 2 weeks ago

Rdp client is blocked on client machine, how user can run the rdp client even smart tunnelling is enabled?

upvoted 2 times

...

kylesam2017

12 months ago

"B", smart tunneling is the correct answer here.

upvoted 1 times

...