Free Cisco 300-730 SVPN Actual Exam Questions - Question 14 Discussion
All internal clients behind the ASA are port address translated to the public outside interface that has
an IP address of 3.3.3.3. Client 1 and client 2 have established successful SSL VPN connections to the
AS
Maybe E fits better since tunneling the network list ensures clients route traffic through the VPN, making 3.3.3.3 appear as their source IP in browser searches. Options about traffic permits or exclusions seem less relevant.
This isn’t about same-security traffic rules (B) because the question focuses on what makes “3.3.3.3” show up in a browser when looking up the IP, which points more to DNS or NAT behavior. Options like excluding or tunneling networks (C, D, E) don’t seem relevant here either. The key is making sure that the public IP 3.3.3.3 is correctly returned, so something like A (implementing correct NAT or DNS mapping) fits better to handle that translation visible to the client.
Option A, some sort of NAT or DNS config is needed to return 3.3.3.3 from a browser query.
Maybe B, since it allows traffic between interfaces with the same security level.
Makes sense that B enables traffic to cross interfaces with the same security level. B
B/E? If the goal is for external sites to see 3.3.3.3, the ASA needs to NAT that traffic properly; same-security-traffic (B) lets traffic cross interfaces, but tunneling all or specific networks (E) ensures VPN traffic routes through the ASA’s public IP.
B tbh, because if you want the traffic from the SSL VPN clients to appear as coming from the ASA’s outside interface IP (3.3.3.3), you need to allow traffic between interfaces of the same security level—hence the same-security-traffic permit inter-interface under Group Policy. The other options deal with what traffic is tunneled or excluded from tunneling, which affects routing, but not directly what IP is visible externally. So if the goal is for external sites to see 3.3.3.3, enabling inter-interface traffic on the same security level makes sense here.
Wait, what exactly do they mean by “returned from a browser search”?