Cisco Exam 300-730 Topic 1 Question 91 Discussion

Actual exam question for Cisco's 300-730 exam

Question #: 91
Topic #: 1

Refer to the exhibit.

The network administrator must allow the Cisco AnyConnect Secure Mobility Client to securely access the corporate resources via IKEv2 and print locally. Traffic that is destined for the Internet must still be tunneled to the Cisco AS

AWhich configuration does the administrator use to accomplish this goal?

ASplit exclude policy with a deny for 192.168.0.3/32.

BSplit exclude policy with a permit for 0.0.0.0/32.

CTunnel all policy.

DSplit include policy with a permit for 192.168.0.0/24.

Show Suggested Answer

Suggested Answer: D

Optimal Gateway Selection (OGS). OGS is a feature that can be used in order to determine which gateway has the lowest Round Trip Time (RTT) and connect to that gateway. One can use the OGS feature in order to minimize latency for Internet traffic without user intervention. With OGS, Cisco AnyConnect Secure Mobility Client (AnyConnect) identifies and selects which secure gateway is best for connection or reconnection. OGS begins upon first connection or upon a reconnection at least four hours after the previous disconnection.

by Mabel at Jul 06, 2024, 09:08 PM

Limited Time Offer

25%

Off

Get Premium 300-730 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Valda

1 months ago

Wait, did the question say they want to 'securely' access the corporate resources? In that case, option A is probably the way to go, unless you want your employees printing classified documents at the local Kinko's.

upvoted 0 times

Timothy

3 days ago

User 1: I think option A is the best choice for securely accessing corporate resources.

upvoted 0 times

...

Richelle

2 months ago

Ah, the old split include policy. That could work, but I'd rather have more control over the exclusions than the inclusions.

upvoted 0 times

Jerry

5 days ago

User 3: I prefer the split include policy with a permit for 192.168.0.0/24 for more flexibility.

upvoted 0 times

...

Goldie

20 days ago

User 2: I agree, it's important to have control over the exclusions.

upvoted 0 times

...

Dannie

20 days ago

I think the split exclude policy with a deny for 192.168.0.3/32 would be a better choice.

upvoted 0 times

...

Tashia

21 days ago

User 1: I think the split exclude policy with a deny for 192.168.0.3/32 would be the best option.

upvoted 0 times

...

Burma

26 days ago

I agree, having more control over exclusions is important for security.

upvoted 0 times

...

Haydee

2 months ago

Tunneling all traffic seems a bit overkill. We want to allow local printing, so a split exclude policy seems more appropriate.

upvoted 0 times

...

Michal

2 months ago

But wouldn't split include policy with a permit for 192.168.0.0/24 be more specific and secure?

upvoted 0 times

...

Helga

2 months ago

I disagree, I believe tunnel all policy would be the best option for this scenario.

upvoted 0 times

...

Michal

2 months ago

I think the administrator should use split exclude policy with a permit for 0.0.0.0/32.

upvoted 0 times

...

Ena

2 months ago

I'm not sure if option B is the best choice. Permitting everything outside the corporate network might not be secure enough.

upvoted 0 times

Marjory

2 months ago

User 2: I agree, option B seems too risky. We need to restrict access to only what is necessary.

upvoted 0 times

...

Andra

2 months ago

User 1: I think option A is the best choice. Denying specific IP address is more secure.

upvoted 0 times

...

Jaclyn

2 months ago

Why do you think option D is better?

upvoted 0 times

...

Carin

2 months ago

I disagree, I believe option D is the best choice.

upvoted 0 times

...

Jaclyn

2 months ago

I think the administrator should use option A.

upvoted 0 times

...

Jani

2 months ago

Option A seems like the way to go here. Excluding the corporate network and tunneling everything else to the internet sounds like the right approach.

upvoted 0 times

Alaine

23 days ago

User1: Yes, that's correct. It allows access to corporate resources via IKEv2 and tunnels other traffic to the internet.

upvoted 0 times

...

Nadine

29 days ago

User3: Split exclude policy with a deny for 192.168.0.3/32, right?

upvoted 0 times

...

Walker

2 months ago

User2: I agree, excluding the corporate network and tunneling everything else makes sense.

upvoted 0 times

...

Staci

2 months ago

User1: I think option A is the best choice.

upvoted 0 times

...