Exam 300-730 topic 1 question 139 discussion

Actual exam question from Cisco's 300-730

Question #: 139
Topic #: 1

Refer to the exhibit.

The network administrator must allow the Cisco AnyConnect Secure Mobility Client to securely access the corporate resources via IKEv2 and print locally. Traffic that is destined for the Internet must still be tunneled to the Cisco ASA. Which configuration does the administrator use to accomplish this goal?

A. Split exclude policy with a deny for 192.168.0.3/32.
B. Split exclude policy with a permit for 0.0.0.0/32.
C. Tunnel all policy.
D. Split include policy with a permit for 192.168.0.0/24.

Show Suggested Answer

Suggested Answer: B 🗳️

by mazinhoo at Jan. 19, 2023, 12:57 p.m.

Comments

Submit Cancel

mazinhoo

Highly Voted 2 years, 5 months ago

Selected Answer: B

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/70847-local-lan-pix-asa.html

upvoted 5 times

...

Net4dd

Highly Voted 2 years, 4 months ago

Selected Answer: B

B is correct. 0.0.0.0/32 means local LAN. Check link below

upvoted 5 times

iratus_umbra

7 months, 1 week ago

Thanks! Right there in the last sentence of the Background Information paragraph it states: "Instead, the ASA supplies a default network of 0.0.0.0/255.255.255.255, which is understood to mean the local LAN of the client."

upvoted 1 times

...

Khs01

Most Recent 1 year, 11 months ago

Selected Answer: B

B. 100%

upvoted 2 times

...