Question 1.
You want to configure Network Connect to allow users to connect through a tunnel, connect to hosts on the same subnet as their local adapter, and shut down any attempt to extend the network boundaries. 

How do you proceed?

A. Enable split tunneling.
B. Disable split tunneling.
C. Enable split tunneling with route change monitor.
D. Allow access to local subnet with route change monitor.

Answer:  D

Question 2.
Which three authentication servers are included with a baseline license? (Choose three.)

A. NIS
B. ACE
C. SAML
D. LDAP
E. SiteMinder

Answer:  A, B, D

Question 3.
You create a set of role mapping rules. You select "Merge settings for all assigned roles." The second role mapping rule has the "Stop processing rules when this rule matches" option selected. 

A user logs in that matches the first three rules. What happens?

A. This is not a valid combination. The system displays an error message and does not update the configuration.
B. The merge settings override the stop processing option. The user matches all three roles and merging follows the standard merging criteria.
C. The Stop rule prevents any more rule matching after checking the second rule. The merge option only merges the roles of the first two rules following the IVE's built-in permissive merging rules.
D. The Stop rule prevents any more rule matching after checking the second rule. The user now just matches the second rule. The merge option is overridden and the user is given only the privileges defined by the second role.

Answer:  C

Question 4.
When using the J-SAM, where on a client machine would you look to verify that the loopback addresses are assigned correctly?

A. HOSTS file
B. ARP cache
C. LMHOSTS file
D. local route table

Answer:  A

Question 5.
What is Cache Cleaner used for?

A. to prevent users from signing in from insecure machines
B. to remove content downloaded during the IVE session
C. to remove Web content cached by the IVE on behalf of the user
D. to determine which files should be cached between remote access sessions

Answer:  B

Question 6.
Which role-based session option would an administrator configure to allow a user to connect from different source IP addresses within the same user session?

A. roaming session
B. persistent session
C. persistent password caching
D. browser request follow-through

Answer:  A

Question 7.
Which two Web Resource Policy features provide you with the capability to configure the IVE to work with corporate Proxy Servers? (Choose two.)

A. Web Proxy Policies
B. Web Proxy Servers
C. Web Cache Policies
D. Web Passthrough Proxy

Answer:  A, B 

Question 8.
Which two statements about SSL VPNs are true? (Choose two.)

A. SSL VPNs provide better security than IPSEC.
B. SSL VPNs provide a dedicated, point to point connection.
C. SSL VPNs provide high performance for individual connections.
D. SSL VPNs use well-known technologies for secure individual connections.

Answer:  C, D

Question 9.
You are using RADIUS as your authorization server. Other than username, which two attributes are available for creating role mapping rules? (Choose two.)

A. Certificate
B. User Attribute
C. RSA Attributes
D. Group Membership

Answer:  A, B

Question 10.
Where is the IVE typically deployed in the network?

A. behind the Internet firewall
B. internally with all clients directly cabled to the IVE
C. both interfaces on the outside of the Internet firewall
D. parallel to the Internet firewall with one interface on the outside and one on the inside

Answer:  A

	Web www.certsbraindumps.com