Pass the Cisco Specialist 648-385 Questions and answers with ExamsMirror

delivers granular visibility and control down to the user and device level

provides partial security coverage over the network devices

provides faster, more accurate protection from threats

improves network security in cooperation with trusted vendor, third-party ecosystem

increases operational efficiency with simplified policies, integrated security options, and automatic security enforcement

It supports always-on connectivity by automatically establishing a VPN connection as needed. If multiple VPN gateways exist, load sharing occurs in a round-robin fashion.

It supports session persistence after hibernation or standby.

Trusted Network Detection allows the connection to be established without any user intervention (authentication), if the client is located inside the office.

It is exclusively configured by central policies; no local configuration is possible.

The order of policy enforcement is as follows: dynamic access policy, user attributes, tunnel group, group policy attributes.

all Catalyst switches

only on Cisco Nexus Switches

only on Catalyst 3560-C Series Switches and above

only on Catalyst 6500 Series Switches

User must select the nearest network access point to connect to.

It supports session persistence after hibernation or standby.

It is supported on Windows 7 and above.

It is exclusively configured by central policies; no local configuration is possible.

Only local policy configuration is supported.

In order to receive priority treatment for mission-critical traffic across the SP cloud, the higher number of locally used classes of service have to be mapped to the fewer number service classes that are usually offered by service providers.

In order to maintain DSCP values end-to-end, inbound traffic from the SP cloud needs to be reclassified if it was sent through a tunnel.

RFC 4594 describes how to classify and mark traffic at the campus and branch LAN using 12 different classifications.

According to RFC 4594, voice and video traffic should be sent through two separate priority queues.