Implementing Secure Solutions with Virtual Private Networks (SVPN) — Question 79

A network engineer must configure the Cisco ASA so that Cisco AnyConnect clients establishing an SSL VPN connection create an additional tunnel for real-time traffic that is sensitive to packet delays. If this additional tunnel experiences any issues, it must fall back to a TLS connection. Which two Cisco AnyConnect features must be configured to accomplish this task? (Choose two.)

Answer options

• A. DTLS
• B. DSCP Preservation
• C. DPD
• D. SSL Rekey
• E. OMTU

Correct answer: A, C

Explanation

DTLS is necessary for creating a faster and more efficient tunnel for real-time traffic, while DPD is essential for detecting issues with the tunnel and ensuring a fallback to TLS. The other options, while useful for various purposes, do not specifically address the requirement for both real-time traffic handling and fallback mechanisms.