Exam 300-730 topic 1 question 161 discussion

Actual exam question from Cisco's 300-730

Question #: 161
Topic #: 1

A network engineer must configure the Cisco ASA so that Cisco AnyConnect clients establishing an SSL VPN connection create an additional tunnel for real-time traffic that is sensitive to packet delays. If this additional tunnel experiences any issues, it must fall back to a TLS connection. Which two Cisco AnyConnect features must be configured to accomplish this task? (Choose two.)

A. DTLS
B. DSCP Preservation
C. DPD
D. SSL Rekey
E. OMTU

Show Suggested Answer

Suggested Answer: AC 🗳️

by red_sparrow_Gr at Feb. 8, 2023, 9:29 p.m.

Comments

Submit Cancel

Net4dd

9 months, 2 weeks ago

Selected Answer: AC

A and C are correct: https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/vpn/asa-96-vpn-config/vpn-anyconnect.html

upvoted 3 times

...

red_sparrow_Gr

10 months ago

Configure Dead Peer Detection Dead Peer Detection (DPD) ensures that the ASA (gateway) or the client can quickly detect a condition where the peer is not responding, and the connection has failed. To enable dead peer detection (DPD) and set the frequency with which either the AnyConnect client or the ASA gateway performs DPD, do the following: Before you begin This feature applies to connectivity between the ASA gateway and the AnyConnect SSL VPN Client only. It does not work with IPsec since DPD is based on the standards implementation that does not allow padding, and CLientless SSL VPN is not supported. If you enable DTLS, enable Dead Peer Detection (DPD) also. DPD enables a failed DTLS connection to fallback to TLS. Otherwise, the connection terminates.

upvoted 3 times

...