Cisco 642-648 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 642-648
Exam Name/Title: Deploying Cisco ASA VPN Solutions (VPN v2.0)
Certification Provider: Cisco
Corresponding Certification: CCNP Security

Exam Questions: 121
Updated On: May 27, 2026

Question #8

Refer to following Exhibit and answer the following question below:

Upon logging in, user, emploeyee1, gets two sets of privileges. Choose the two options that show the privileges that are held by employee1.(Choose two)

A. Level 3

B. CLI login prompt for SSH, Telnet, and console only

C. Level 15

D. Cisco ASDM, SSH, Telnet, and console access

E. No Cisco ASDM, SSH, or console access

F. Level 2

Discussion 0

Correct Answer: C,F Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #9

ABC Corporation has hired a temporary worker to help out with a new project. The network administrator gives you the task of restricting the internal clientless SSL VPN network access of the temporary worker to one server with the IP address of 172.26.26.50 via HTTP.
Which two actions should you take to complete the assignment? (Choose two.)

A. Apply the access list to the outside interface in the inbound direction.

B. Configure access-list temp_acl webtype permit url http://172.26.26.50.

C. Configure access-list temp_acl_extended extended permit http any host 172.26.26.50.

D. Configure access-list temp_acl_stand_ACL standard permit host 172.26.26.50.

E. Apply the access list to the temporary worker Connection Profile.

F. Apply the access list to the temporary worker Group Policy.

Discussion 0

Correct Answer: B,F Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #10

Cisco AnyConnect profiles can be used to set which three options? (Choose three.)

A. Define a list of backup servers if primary gateways are unavailable.

B. Define a quarantine VLAN for remote devices that fail a host scan.

C. Define a guest VLAN to all "noncompany" Cisco IOS WebVPN users.

D. Configure the Cisco Secure Desktop vault.

E. Define a list of VPN gateways that are presented to users upon login.

F. Activate the SSL VPN tunnel as part of the Windows login sequence.

Discussion 0

Correct Answer: A,E,F Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #11

DRAG DROP

Discussion 0

Correct Answer:

Explanation:
Base (P) + 50 SSL users (P)
Base (P) + 25 SSL users (P)
Base + 25 SSL Users + Botnet
Base (P) + 50 SSL Users (T)

Question #12

Which three statements about clientless SSL VPN are true? (Choose three.)

A. Cisco AnyConnect SSL VPN software is automatically downloaded to the remote user at the start of the clientless session.

B. Clientless SSL VPN requires an SSL-enabled web browser.

C. For security reasons, browser cookies are disabled for clientless SSL VPN sessions.

D. Minimal IT support is required.

E. Users are not tied to a particular PC or workstation.

F. Users have full application access to internal corporate resources.

Discussion 0

Correct Answer: B,D,E Vote an answer

Question #13

Refer to following Exhibit and answer the following question below:

After providing the correct VPN login credentials, user, contractor1, is enabled to use which VPN access type?

A. Cisco Any Connect VPN and clientless VPN

B. Cisco Any Connect VPN, clientless VPN, and IPsec VPN

C. Clientless VPN

D. Cisco Any Connect VPN

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #14

In clientless SSL VPN, administrators can control user access to the internal network or resources of a company. What is this control based on?

A. per-user or per-group ACLs

B. interface ACLs

C. MPF-configured service policies

D. WebType ACLs

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Download Free Cisco 642-648 Demo

Simply submit your e-mail address below to get started with our free demo of your Cisco 642-648 exam.