CiscoCertified Network Professional Security
Domain 1Objective 6
1.6 Describe Site-To-Site and Remote Access VPN Deployment Types Such as Virtual Tunnel Interfaces, Standards-Based IPsec, SSL VPN, DMVPN, FlexVPN, and GETVPN 350-701 Practice Questions (Page 2)
Part of the Security Concepts domain, which accounts for 20% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)
30questions here
6free pages
6concepts
20%of the exam
Questions 6–10
- 6
Which statement correctly describes the two phases of IKEv1 in standards-based IPsec?
Select an answer first - 7
How does a VTI simplify routing for a site-to-site VPN compared to a traditional crypto map approach?
Select an answer first - 8
A government agency uses a private IP/MPLS WAN to connect multiple sites. The sites run multicast applications that must be encrypted. The agency wants to avoid the overhead of tunnel encapsulation and preserve the original source and destination IP addresses for network monitoring. Which VPN technology should be deployed?
Select an answer first - 9
A law firm has remote attorneys who need access to a document management system that requires a Java-based client. The attorneys use a mix of Windows and macOS laptops. The firm wants to avoid installing a full VPN client on every laptop. Which VPN deployment should be used?
Select an answer first - 10
Which SSL VPN deployment type allows a user to access internal web applications through a web browser without installing a client?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.