ExamQuestions.com

Register
Login
CCIE Security Written Exam (400-251) Exam Questions

Cisco

CCIE Security Written Exam (400-251)

441 / 530

Question 441:


                
                
            
                image
            
            
                
Client1 has an IPsec VPN tunnel established to a Cisco ASA adaptive security appliance in Chicago. The remote access VPN client wants to access www.cisco.com, but split tunneling is disabled. Which of these is the appropriate configuration on the Cisco ASA adaptive security appliance if the VPN client`s public IP address is 209.165.201.10 and it is assigned a private address from 192.168.1.0/24? 

Answer options:

A. same-security-traffic permit intra-interface ip local pool ippool 192.168.1.1-192.168.1.254 global (outside) 1 209.165.200.230 nat (inside) 1 192.168.1.0 255.255.255.0
B. same-security-traffic permit intra-interface ip local pool ippool 192.168.1.1-192.168.1.254 global (outside) 1 209.165.200.230 nat (outside) 1 192.168.1.0 255.255.255.0
C. same-security-traffic permit intra-interface ip local pool ippool 192.168.1.1-192.168.1.254 global (inside) 1 209.165.200.230 nat (inside) 1 192.168.1.0 255.255.255.0
D. same-security-traffic permit intra-interface ip local pool ippool 192.168.1.1-192.168.1.254 global (outside) 1 209.165.200.230 nat (outside) 1 209.165.201.10 255.255.255.255
E. same-security-traffic permit intra-interface ip local pool ippool 192.168.1.1-192.168.1.254 global (outside) 1 209.165.200.230 nat (inside) 1 209.165.201.10 255.255.255.255
F. same-security-traffic permit intra-interface ip local pool ippool 192.168.1.1-192.168.1.254 global (inside) 1 209.165.200.230 nat (inside) 1 209.165.201.10 255.255.255.255