Question 441 of 530 from exam 400-251: CCIE Security written exam

Prev Question Next Question

Question

299.165.200.225

192.168.20.0/24 — 192.168.10.0/24.

a

Chicago

wwww.cisco.com

Client1 has an IPsec VPN tunnel established to a Cisco ASA adaptive security appliance in Chicago.

The remote access VPN client wants to access www.cisco.com, but split tunneling is disabled.

Which of these is the appropriate configuration on the Cisco ASA adaptive security appliance if the VPN client's public IP address is 209.165.201.10 and it is assigned a private address from 192.168.1.0/24?

Answers

A. same-security-traffic permit intra-interface ip local pool ippool 192.168.1.1-192.168.1.254 global (outside) 1 209.165.200.230 nat (inside) 1 192.168.1.0 255.255.255.0

B. same-security-traffic permit intra-interface ip local pool ippool 192.168.1.1-192.168.1.254 global (outside) 1 209.165.200.230 nat (outside) 1 192.168.1.0 255.255.255.0

C. same-security-traffic permit intra-interface ip local pool ippool 192.168.1.1-192.168.1.254 global (inside) 1 209.165.200.230 nat (inside) 1 192.168.1.0 255.255.255.0

D. same-security-traffic permit intra-interface ip local pool ippool 192.168.1.1-192.168.1.254 global (outside) 1 209.165.200.230 nat (outside) 1 209.165.201.10 255.255.255.255

E. same-security-traffic permit intra-interface ip local pool ippool 192.168.1.1-192.168.1.254 global (outside) 1 209.165.200.230 nat (inside) 1 209.165.201.10 255.255.255.255

F. same-security-traffic permit intra-interface ip local pool ippool 192.168.1.1-192.168.1.254 global (inside) 1 209.165.200.230 nat (inside) 1 209.165.201.10 255.255.255.255

Show Answer

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E. F.

Prev Question Next Question