Cisco Exam 300-730 Topic 5 Question 96 Discussion

Actual exam question for Cisco's 300-730 exam

Question #: 96
Topic #: 5

A network engineer must configure the Cisco ASA so that Cisco AnyConnect clients establishing an SSL VPN connection create an additional tunnel for real-time traffic that is sensitive to packet delays. If this additional tunnel experiences any issues, it must fall back to a TLS connection. Which two Cisco AnyConnect features must be configured to accomplish this task? (Choose two.)

ADTLS

BDSCP Preservation

CDPD

DSSL Rekey

EOMTU

Show Suggested Answer

Suggested Answer: A, C

https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/vpn/asa-96-vpn-config/vpn-anyconnect.html

Configure Dead Peer Detection Dead Peer Detection (DPD) ensures that the ASA (gateway) or the client can quickly detect a condition where the peer is not responding, and the connection has failed. To enable dead peer detection (DPD) and set the frequency with which either the AnyConnect client or the ASA gateway performs DPD, do the following: Before you begin This feature applies to connectivity between the ASA gateway and the AnyConnect SSL VPN Client only. It does not work with IPsec since DPD is based on the standards implementation that does not allow padding, and CLientless SSL VPN is not supported. If you enable DTLS, enable Dead Peer Detection (DPD) also. DPD enables a failed DTLS connection to fallback to TLS. Otherwise, the connection terminates.

by Rickie at Sep 14, 2024, 08:11 AM

Limited Time Offer

25%

Off

Get Premium 300-730 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jeffrey

3 days ago

Definitely A) DTLS and B) DSCP Preservation. The DSCP preservation feature is crucial for maintaining the quality of the real-time traffic, while DTLS handles the additional tunnel.

upvoted 0 times

...

Francine

4 days ago

I'm not sure about DPD, but I think DTLS is definitely needed for sensitive traffic.

upvoted 0 times

...

Tien

9 days ago

I agree with Nan. DTLS and DPD make sense for real-time traffic.

upvoted 0 times

...

Cherry

9 days ago

I think the correct answers are A) DTLS and C) DPD. DTLS provides the real-time traffic tunnel, and DPD ensures that the connection falls back to TLS if there are any issues with the DTLS tunnel.

upvoted 0 times

Alpha

1 days ago

A: I agree, DTLS is definitely needed for real-time traffic.

upvoted 0 times

...

Nan

13 days ago

I think the answer is A) DTLS and C) DPD.

upvoted 0 times

...