Cisco Exam 300-730 Topic 14 Question 80 Discussion

Actual exam question for Cisco's 300-730 exam

Question #: 80
Topic #: 14

An engineer is requesting an SSL certificate for a VPN load-balancing cluster in which two Cisco ASAs provide clientless SSLVPN access. The FQDN that users will enter to access the clientless VPN is asa.example.com, and users will be redirected to either asa1.example.com or asa2.example.com. The cluster FQDN and individual Cisco ASAs FQDNs resolve to IP addresses 192.168.0.1, 192.168.0.2, and 192.168.0.3 respectively. The issued certificate must be able to be used to validate the identity of either ASA in the cluster without returning any certificate validation errors. Which fields must be included in the certificate to meet these requirements?

ACN=*.example.com, SAN=asa.example.com

BCN=192.168.0.1, SAN=asa1.example.com, asa2.example.com

CCN=asa.example.com, SAN=asa.example.com, asa1.example.com, asa2.example.com

DCN=192.168.0.1, SAN=192.168.0.1, 192.168.0.2, 192.168.0.3

Show Suggested Answer

Suggested Answer: C

https://integratingit.wordpress.com/2020/03/14/asa-vpn-load-balancing/

by Gail at Feb 11, 2024, 08:05 AM

Limited Time Offer

25%

Off

Get Premium 300-730 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Maxima

12 months ago

I would go with option A as well, it seems simpler and covers the main requirements.

upvoted 0 times

...

Norah

12 months ago

I'm not sure, but I think including all the FQDNs in the SAN might be the best option.

upvoted 0 times

...

Essie

1 years ago

I disagree, I believe the correct answer is C) CN=asa.example.com, SAN=asa.example.com, asa1.example.com, asa2.example.com.

upvoted 0 times

...

Annabelle

1 years ago

I think the answer is A) CN=*.example.com, SAN=asa.example.com.

upvoted 0 times

...

Audry

1 years ago

Haha, imagine if the engineer asked for a certificate with just the IP addresses in the SAN. That would be a disaster waiting to happen!

upvoted 0 times

...

Celestina

1 years ago

Yeah, I agree with Norah. C seems like the most comprehensive option to meet the requirements. The CN and SAN fields should have the necessary information.

upvoted 0 times