Cisco Exam 300-730 Topic 5 Question 96 Discussion

Actual exam question for Cisco's 300-730 exam

Question #: 96
Topic #: 5

A network engineer must configure the Cisco ASA so that Cisco AnyConnect clients establishing an SSL VPN connection create an additional tunnel for real-time traffic that is sensitive to packet delays. If this additional tunnel experiences any issues, it must fall back to a TLS connection. Which two Cisco AnyConnect features must be configured to accomplish this task? (Choose two.)

ADTLS

BDSCP Preservation

CDPD

DSSL Rekey

EOMTU

Show Suggested Answer

Suggested Answer: A, C

https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/vpn/asa-96-vpn-config/vpn-anyconnect.html

Configure Dead Peer Detection Dead Peer Detection (DPD) ensures that the ASA (gateway) or the client can quickly detect a condition where the peer is not responding, and the connection has failed. To enable dead peer detection (DPD) and set the frequency with which either the AnyConnect client or the ASA gateway performs DPD, do the following: Before you begin This feature applies to connectivity between the ASA gateway and the AnyConnect SSL VPN Client only. It does not work with IPsec since DPD is based on the standards implementation that does not allow padding, and CLientless SSL VPN is not supported. If you enable DTLS, enable Dead Peer Detection (DPD) also. DPD enables a failed DTLS connection to fallback to TLS. Otherwise, the connection terminates.

by Rickie at Sep 14, 2024, 08:11 AM

Limited Time Offer

25%

Off

Get Premium 300-730 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Johna

2 months ago

As a network ninja, I'd say A) DTLS and E) OMTU are the way to go. OMTU helps with the MTU negotiation for the VPN tunnel, and DTLS is the obvious choice for the real-time traffic.

upvoted 0 times

Eva

8 days ago

I think D) SSL Rekey could also be useful for security purposes.

upvoted 0 times

...

Loren

13 days ago

Should we also consider D) DSCP Preservation for quality of service?

upvoted 0 times

...

Beckie

20 days ago

E) OMTU is definitely important for optimizing the VPN tunnel.

upvoted 0 times

...

Colby

29 days ago

I agree, A) DTLS is essential for real-time traffic.

upvoted 0 times

...

Brittni

2 months ago

Haha, I bet the engineer has to be a real VPN wizard to configure this setup. Gotta love those Cisco acronyms, though! I'm going with A) DTLS and D) SSL Rekey.

upvoted 0 times

Danica

1 months ago

I've heard that DPD is also important for detecting dead peers. It's all about making sure the connection is reliable and secure.

upvoted 0 times

...

Marisha

2 months ago

Yeah, I think D) SSL Rekey is important for ensuring a secure connection. Those acronyms can be confusing, but once you get the hang of it, it's not too bad.

upvoted 0 times

...

Lizbeth

2 months ago

I agree, configuring Cisco VPNs can be tricky. I think A) DTLS is definitely needed for real-time traffic.

upvoted 0 times

...

Jeffrey

2 months ago

Definitely A) DTLS and B) DSCP Preservation. The DSCP preservation feature is crucial for maintaining the quality of the real-time traffic, while DTLS handles the additional tunnel.

upvoted 0 times

Glenna

26 days ago

It's important to configure both features to ensure a reliable SSL VPN connection.

upvoted 0 times

...

Sharee

27 days ago

DSCP Preservation helps maintain the quality of sensitive traffic.

upvoted 0 times

...

Shawnee

1 months ago

DTLS ensures a secure additional tunnel for real-time traffic.

upvoted 0 times

...

Marjory

1 months ago

I agree, DTLS and DSCP Preservation are essential for this configuration.

upvoted 0 times

...

Francine

2 months ago

I'm not sure about DPD, but I think DTLS is definitely needed for sensitive traffic.

upvoted 0 times

...

Tien

2 months ago

I agree with Nan. DTLS and DPD make sense for real-time traffic.

upvoted 0 times

...

Cherry

2 months ago

I think the correct answers are A) DTLS and C) DPD. DTLS provides the real-time traffic tunnel, and DPD ensures that the connection falls back to TLS if there are any issues with the DTLS tunnel.

upvoted 0 times