A.CiscoWorks VPN Manager
B.Easy VPN client mode
C.deploy Linksys routers with menu driven configuration
D.disable 802.1x and Auth Proxy on the Teleworker router

A.802.1X is simple to implement on any workstation.
B.802.1X requires access-lists to allow IP voice traffic across.
C.Authentication is initiated when the workstation connects to an Ethernet port.
D.802.1X requires HTTP access to initiate authentication.

A.The DHCP pool needs to have an import all statement. 
B.The DHCP pool is missing an option 150 ip 10.59.138.1 statement.
C.The DHCP pool is missing an option 139 ip 10.59.138.1 statement
D.The DHCP pool is missing a dns-server 10.59.138.1 statement.

A.The interval value should be configured at 150ms since that is target latency budget.
B.This router never delayed any packets.
C.This router is provisioned for a 256K DSL link.
D.The inside LAN interface is Ethernet 0/0.

A.Configure Access Control Lists to ensure Voice over IP traffic is checked by Auth Proxy.
B.Configure pNAT to ensure Voice over IP packets are properly translated.
C.Configure IOS firewall to permit RTP port numbers through the firewall via VPN. 
D.Configure Access Control Lists to allow Voice over IP traffic to bypass Auth Proxy checking.

A.There is lower bandwidth consumption for VoIP media streams.
B.Teleworkers can have the same extensions and inward-dialing numbers at their office desks and home offices.
C.Personal calls are routed directly through the residential PSTN line.
D.Teleworkers can have different extensions at their office desks and home offices.
E.There is less burden on Cisco CallManager for signaling traffic.
F.Incoming calls are first routed to the office desks, then to the home offices.

A.most widely deployed by service providers 
B.provides asymmetrical bandwidth, including high speed downlink
C.data rate is affected by distance to the Central Office
D.provides the furthest reach at T1 speeds 
E.supports connection of two routers without the use of a DSL access concentrator

A.when the router is booted up
B.when the router administratively does a no shutdown" on the IPSec SA 
C.when traffic matches a line of the access-list tied into the crypto-map in the router configuration, and that particular IPSec SA is not already up 
D.when the ISAKMP SA completes negotiation of all IPSec SAs (one per access-list line in the crypto ACL), it will be brought up immediately

A.Deployment of Business Ready Teleworker with VoIP is not recommended.
B.The customer’s existing PBX must first be replaced with Cisco IP Telephony solution.
C.Business Ready Teleworker and Cisco IP Telephony can be deployed in parallel to the existing PBX， integrating the two with trunking.
D.Deployment is recommended only for full-time Teleworkers who have no other corporate phone.

A.VPN tunnel authentication is part of the IKE specification. 
B.VPN tunnel authentication does not control which end user can use the IPSec SA (VPN tunnel).
C.User authentication is used to control access for a specific user ID, and can be used with or without a VPN tunnel for network access authorization. 
D.802.1X with EAP-TLS (X.509 certificates) can be used to authenticate an IPSec tunnel.

A.Inbound packets are permitted only if they are part of a legitimate data flow initiated by a device on the Teleworker home network.
B.All packets are checked for integrity by analyzing their checksum.
C.Every packet is checked to see if it was sent through the VPN tunnel.
D.Every packet is inspected to see if any disallowed URLs are included. URLs are forwarded to the security cache engine for authorization.