CCNA Exam 642-081 - Business Ready Teleworker Solution Fundamentals (TELWRKR)

CCNA Exam 642-081
Title: Business Ready Teleworker Solution Fundamentals (TELWRKR)
Ver: 02.12.07

Example Question out of 69 Questions:

QUESTION 58:
Why might the following configuration command be entered into a router’s configuration? no crypto ipsec nat-transparency udp-encapsulation
A. You wish to disable nat-transparency and use IPSec passthru.
B. It is incompatible with QoS pre-classify.
C. It disables anti-replay on the receiving router.
D. WRED cannot randomly drop UDP packets, so UDP encapsulation should be avoided.

Answer: A

QUESTION 59:
Which can be used to check if a packet’s ToS/IP Precedence/DSCP value is being marked correctly, from a specific host/flow? Choose two.
A. Use Netflow on the Teleworker router.
B. Use a Protocol Analyzer on the same LAN as the client.
C. Use a Protocol Analyzer between the Teleworker router and broadband modem.
D. Use show policy-map interface.

Answer: A,B

QUESTION 60:
What is not a difference between VPN tunnel authentication and per-user authentication?
A. VPN tunnel authentication is part of the IKE specification.
B. VPN tunnel authentication does not control which end user can use the IPSec SA (VPN tunnel).
C. User authentication is used to control access for a specific user ID, and can be used with or without a VPN tunnel for network access authorization.
D. 802.1X with EAP-TLS (X.509 certificates) can be used to authenticate an IPSec tunnel.

Answer: D