CCIE Security
Domain 2Objective 1
2.1 Cisco AnyConnect Client-Based, Remote-Access VPN Technologies on Cisco ASA, Cisco FTD, and Cisco Routers CCIE-SECURITY Practice Questions (Page 8)
Part of the 2.0 Secure Connectivity and Segmentation domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 2–3 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)
38questions here
8free pages
15concepts
20%of the exam
Questions 36–38
- 36
A remote user reports that they can connect to the VPN but cannot access internal resources. The user is using AnyConnect on a laptop. The ASA has split tunneling configured to include only the internal network 10.0.0.0/8. The user can ping the internal gateway but not a server at 10.1.2.3. What is the most likely cause?
Select an answer first - 37
A company has two ASA firewalls in a failover pair. They want to ensure that AnyConnect VPN sessions are not interrupted if one ASA fails. Which feature should be enabled?
Select an answer first - 38
A user is unable to connect to the AnyConnect VPN on an ASA. The user receives an error message about authentication failure. The ASA is configured to use RADIUS authentication. Which command should you use to troubleshoot the authentication issue?
Select an answer first
Finished these 3 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to CCIE-SECURITY
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.