File Info
| Exam | Implementing Secure Solutions with Virtual Private Networks |
| Number | 300-730 |
| File Name | Cisco.300-730.NewDumps.2023-08-04.17q.vcex |
| Size | 2 MB |
| Posted | Aug 04, 2023 |
| Download | Cisco.300-730.NewDumps.2023-08-04.17q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Drag and drop the correct commands from the night onto the blanks within the code on the left to implement a design that allow for dynamic spoke-to-spoke communication. Not all comments are used.
- Mastered
- Not Mastered
Correct answer: A
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/xe-16/sec-conn-dmvpn-xe-16-book/sec-conn-dmvpn-summ-maps.html Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/xe-16/sec-conn-dmvpn-xe-16-book/sec-conn-dmvpn-summ-maps.html
Question 2
A second set of traffic selectors is negotiated between two peers using IKEv2. Which IKEv2 packet will contain details of the exchange?
- IKEv2 IKE_SA_INIT
- IKEv2 INFORMATIONAL
- IKEv2 CREATE_CHILD_SA
- IKEv2 IKE_AUTH
Correct answer: B
Question 3
On a FlexVPN hub-and-spoke topology where spoke-to-spoke tunnels are not allowed, which command is needed for the hub to be able to terminate FlexVPN tunnels?
- interface virtual-access
- ip nhrp redirect
- interface tunnel
- interface virtual-template
Correct answer: D
Question 4
Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list? (Choose two.)
- group-alias
- certificate map
- optimal gateway selection
- group-url
- AnyConnect client version
Correct answer: BD
Question 5
Which configuration construct must be used in a FlexVPN tunnel?
- EAP configuration
- multipoint GRE tunnel interface
- IKEv1 policy
- IKEv2 profile
Correct answer: D
Question 6
A Cisco AnyConnect client establishes a SSL VPN connection with an ASA at the corporate office. An engineer must ensure that the client computer meets the enterprise security policy. Which feature can update the client to meet an enterprise security policy?
- Endpoint Assessment
- Cisco Secure Desktop
- Basic Host Scan
- Advanced Endpoint Assessment
Correct answer: D
Question 7
Which requirement is needed to use local authentication for Cisco AnyConnect Secure Mobility Clients that connect to a FlexVPN server?
- use of certificates instead of username and password
- EAP-AnyConnect
- EAP query-identity
- AnyConnect profile
Correct answer: D
Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html Reference: https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html
Question 8
Refer to the exhibit.
Which VPN technology is allowed for users connecting to the Employee tunnel group?
- SSL AnyConnect
- IKEv2 AnyConnect
- crypto map
- clientless
Correct answer: B
Question 9
Which command is used to troubleshoot an IPv6 FlexVPN spoke-to-hub connectivity failure?
- show crypto ikev2 sa
- show crypto isakmp sa
- show crypto gkm
- show crypto identity
Correct answer: A
Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/security/flexvpn/116413-configure-flexvpn-00.pdf Reference: https://www.cisco.com/c/en/us/support/docs/security/flexvpn/116413-configure-flexvpn-00.pdf
Question 10
Refer to the exhibit.
A site-to-site tunnel between two sites is not coming up. Based on the debugs, what is the cause of this issue?
- An authentication failure occurs on the remote peer.
- A certificate fragmentation issue occurs between both sides.
- UDP 4500 traffic from the peer does not reach the router.
- An authentication failure occurs on the router.
Correct answer: C
