Annie is a network administrator of her company. She is responsible for a Cisco ASA security
appliance. Using a valid identity certificate from her certificate authority, she has created the
necessary configuration for remote-access VPN tunnels by use of the IPsec VPN Wizard. When
she tests the remote-access VPN, the VPN tunnel does not come up. If the remote-access VPN
configuration created by the wizard is correct and valid certificates are being used by the Cisco
ASA security appliance and Cisco VPN Client, which corrective action should be configured or
corrected for the VPN tunnel to come up properly?

A.
The IKE phase two configuration is not part of the IPsec VPN Wizard configuration and must be
configured.

B.
NAT-Transparency configuration is not part of theIPsec VPN Wizard configuration and must be
configured.

C.
The IKE phase one configuration is not part of the IPsec VPN Wizard configuration and must be
configured.

D.
The mapping of digital certificates to connection profile is not part of theIPsec VPN Wizard
configuration and must be configured.

Explanation: