A client requirement to separate management and

QUESTION 27
A client requirement to separate management and control layer within an organization. Which technology can
be used to achieve this requirement while minimizing physical devices?
A. Virtual Device Context
B. VRF
C. Virtual Switching System
D. Virtual Local Area Networks
E. MEC
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 28
An engineer is designing a multitenant network that requires separate management access and must share a
single physical firewall. Which two features support this design? (Choose two)

/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/
hacontexts.pdf Page 14 of Guidelines for Multiple Context Mode lists unsupported features,
after you cross the unsupported features out – you are left with what works on a multi-context mode firewall
QUESTION 29
Which technology should a network designer combine with VSS to ensure a loop free topology with optimal
convergence time?
D
QUESTION 30
While designing a wide area network, the network team wants to avoid undesired transit traffic through remote
branch sites with multiple WAN connections. Which option can be used to manage traffic flows in the remote
network?
C
Section: (none)
Explanation
Explanation/Reference:
QUESTION 31
What are the true regarding 802.1X? (Choose three)
A. Authenticates the user itself
B. Authenticates the device itself
C. If the device does not support, allow the access automatically
D. Cisco proprietary
E. Industry standard
Correct Answer: ABE
Section: (none)
Explanation
Explanation/Reference:
QUESTION 32

What is one function of key server in Cisco GETVPN deployment?
A. sending the RSA certificate
B. providing pre-shared keys
C. maintaining security polices
D. providing the group ID
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
Comments:
Key server is responsible for maintaining security policies, authenticating the GMs and providing the session
key for encrypting traffic. KS authenticates the individual GMs at the time of registration. Only after successful
registration the GMs can participate in group SA.
deployment_guide_c07_554713.html
C