642-515 practice - PrepKeys

Q5 Single choice

Annie is a network administrator of her company. She is responsible for a Cisco ASA security appliance.
Using a valid identity certificate from her certificate authority, she has created the necessary configuration for remote-access VPN tunnels by use of the IPsec VPN Wizard. When she tests the remote-access VPN, the VPN tunnel does not come up.
If the remote-access VPN configuration created by the wizard is correct and valid certificates are being used by the Cisco ASA security appliance and Cisco VPN Client, which corrective action should be configured or corrected for the VPN tunnel to come up properly?

A
The IKE phase two configuration is not part of the IPsec VPN Wizard configuration and must be configured.
B
NAT-Transparency configuration is not part of theIPsec VPN Wizard configuration and must be configured.
C
The IKE phase one configuration is not part of the IPsec VPN Wizard configuration and must be configured.
D
The mapping of digital certificates to connection profile is not part of the IPsec VPN Wizard configuration and must be configured.
E
The crypto ACL configuration is not part of the IPsec VPN Wizard configuration and must be configured.