Cisco 642-648 Online Practice Questions and Exam Preparation

Cisco 642-648 Online Questions & Answers

• Question 121:

  Which two statements about the Cisco ASA cluster load-balancing feature are correct? (Choose two.)

  A. The Cisco ASA load-balances both site-to-site and remote-access VPN tunnels.
  B. The Cisco ASA load-balances remote-access VPN tunnels only.
  C. The Cisco ASA load-balances IPsec VPN tunnels only.
  D. The Cisco ASA load-balances IPsec VPN and Cisco AnyConnect SSL VPN tunnels only.
  E. The Cisco ASA load-balances IPsec VPN, clientless, and Cisco AnyConnect SSL VPN tunnels.
  B. The Cisco ASA load-balances remote-access VPN tunnels only.
  E. The Cisco ASA load-balances IPsec VPN, clientless, and Cisco AnyConnect SSL VPN tunnels.

  ---

  http://www.cisco.com/en/US/docs/security/asa/asa71/asdm51/selected_procedures/asdm_lb.html#wp1005 Eligible Clients Load balancing is effective only on remote sessions initiated with the following clients:

  稢isco VPN Client (Release 3.0 and later)

  稢isco VPN 3002 Hardware Client (Release 3.5 or later) 稢isco ASA model 5505 when configured as a hardware client 稢isco PIX 501/506E when acting as an Easy VPN client. Load balancing works with both IPSec clients and WebVPN

  sessions. All other clients, including LAN-to-LAN connections, can connect to a security appliance on which load balancing is enabled, but they cannot participate in load balancing.

  http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/vpn_params.html#wp1048834

  Load Balancing

  Load balancing is a mechanism for equitably distributing remote-access VPN traffic among the devices in a virtual cluster. It is based on simple distribution of traffic without taking into account throughput or other factors.

  A load-balancing cluster consists of two or more devices, one is the virtual master, and the other devices are the backup. These devices do not need to be of the exact same type, or have identical software versions or configurations.