File Info
| Exam | Implementing Secure Solutions with Virtual Private Networks |
| Number | 300-730 |
| File Name | Cisco.300-730.VCEplus.2021-03-11.60q.vcex |
| Size | 7 MB |
| Posted | Mar 11, 2021 |
| Download | Cisco.300-730.VCEplus.2021-03-11.60q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Drag and drop the correct commands from the night onto the blanks within the code on the left to implement a design that allow for dynamic spoke-to-spoke communication. Not all comments are used.
Correct answer: To work with this question, an Exam Simulator is required.
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/xe-16/sec-conn-dmvpn-xe-16-book/sec-conn-dmvpn-summ-maps.html Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/xe-16/sec-conn-dmvpn-xe-16-book/sec-conn-dmvpn-summ-maps.html
Question 2
A second set of traffic selectors is negotiated between two peers using IKEv2. Which IKEv2 packet will contain details of the exchange?
- IKEv2 IKE_SA_INIT
- IKEv2 INFORMATIONAL
- IKEv2 CREATE_CHILD_SA
- IKEv2 IKE_AUTH
Correct answer: B
Question 3
Refer to the exhibit. The DMVPN tunnel is dropping randomly and no tunnel protection is configured. Which spoke configuration mitigates tunnel drops?
Correct answer: A
Explanation:
Virtual Private Networks on Routers and Firewalls Explanation Virtual Private Networks on Routers and Firewalls Explanation
Question 4
On a FlexVPN hub-and-spoke topology where spoke-to-spoke tunnels are not allowed, which command is needed for the hub to be able to terminate FlexVPN tunnels?
- interface virtual-access
- ip nhrp redirect
- interface tunnel
- interface virtual-template
Correct answer: D
Question 5
Which statement about GETVPN is true?
- The configuration that defines which traffic to encrypt originates from the key server.
- TEK rekeys can be load-balanced between two key servers operating in COOP.
- The pseudotime that is used for replay checking is synchronized via NTP.
- Group members must acknowledge all KEK and TEK rekeys, regardless of configuration.
Correct answer: A
Question 6
Refer to the exhibit. Which two tunnel types produce the show crypto ipsec sa output seen in the exhibit? (Choose two.)
- crypto map
- DMVPN
- GRE
- FlexVPN
- VTI
Correct answer: BE
Question 7
Which two changes must be made in order to migrate from DMVPN Phase 2 to Phase 3 when EIGRP is configured? (Choose two.)
- Add NHRP shortcuts on the hub.
- Add NHRP redirects on the spoke.
- Disable EIGRP next-hop-self on the hub.
- Enable EIGRP next-hop-self on the hub.
- Add NHRP redirects on the hub.
Correct answer: CE
Question 8
Refer to the exhibit. A customer cannot establish an IKEv2 site-to-site VPN tunnel between two Cisco ASA devices. Based on the syslog message, which action brings up the VPN tunnel?
- Reduce the maximum SA limit on the local Cisco ASA.
- Increase the maximum in-negotiation SA limit on the local Cisco ASA.
- Remove the maximum SA limit on the remote Cisco ASA.
- Correct the crypto access list on both Cisco ASA devices.
Correct answer: B
Question 9
Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list? (Choose two.)
- group-alias
- certificate map
- optimal gateway selection
- group-url
- AnyConnect client version
Correct answer: BD
Question 10
Which method dynamically installs the network routes for remote tunnel endpoints?
- policy-based routing
- CEF
- reverse route injection
- route filtering
Correct answer: C
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnav/configuration/12-4t/sec-vpn-availability-12-4t-book/sec-rev-rte-inject.html Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnav/configuration/12-4t/sec-vpn-availability-12-4t-book/sec-rev-rte-inject.html
