“High Availability and Cisco NSF with SSO The main objective in building a highly available data center network design is to avoid TCP session breakage while
providing convergence that is unnoticeable, or as fast as possible. Cisco nonstop forwarding (NSF) with stateful switchover (SSO) are supervisor redundancy
mechanisms that provide intrachassis SSO at Layers 2 to 4.”

QUESTION NO: 161 When designing remote access to the Enterprise Campus network for teleworkers and mobile workers, which of the following should the
designer consider?

A.
It is recommended to place the VPN termination device in line with the Enterprise Edge firewall, with ingress traffic limited to SSL only

B.
Maintaining access rules, based on the source IP of the client, on an internal firewall drawn from a headend RADIUS server is the most secure deployment

C.
VPN Headend routing using Reverse Route Injection (RRI) with distribution is recommended when the remote user community is small and dedicated DHCP
scopes are in place

D.
Clientless SSL VPNs provide more granular access control than SSL VPN clients (thin or thick), including at Layer7