CCIE Security
Domain 2Objective 1
2.1 Cisco AnyConnect Client-Based, Remote-Access VPN Technologies on Cisco ASA, Cisco FTD, and Cisco Routers CCIE-SECURITY Practice Questions (Page 1)
Part of the 2.0 Secure Connectivity and Segmentation domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 2–3 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)
38questions here
8free pages
15concepts
20%of the exam
Questions 1–5
- 1
A company is deploying AnyConnect on an ASA for a group of remote users who should only access a specific internal web server (10.1.1.10) and the corporate DNS (10.1.1.53). The rest of the traffic should go directly to the internet. The ASA has a single outside interface with a public IP. Which configuration approach best meets the requirement?
Select an answer first - 2
A user is unable to establish an AnyConnect VPN connection to an ASA. The user sees an error about 'SSL certificate verification failed'. What is the most likely cause and solution?
Select an answer first - 3
An organization wants to integrate AnyConnect with Cisco Umbrella to enforce DNS security for remote users. They also want to ensure that only compliant devices (with up-to-date antivirus) can connect. Which two features should be used together?
Select an answer first - 4
Users on a high-latency WAN connection report slow performance when using AnyConnect. The administrator wants to improve throughput without changing the network infrastructure. Which configuration change is most likely to help?
Select an answer first - 5
A company is planning to deploy AnyConnect to 500 remote users. They need to ensure that they have the appropriate licensing for the features they plan to use, including advanced endpoint posture assessment and Umbrella integration. Which AnyConnect license tier should they purchase?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.