Download Implementing Secure Solutions with Virtual Private Networks.DumpsArena.300-730.2021-07-15.5e.98q.vcex

Download Exam

File Info

Exam Implementing Secure Solutions with Virtual Private Networks
Number 300-730
File Name Implementing Secure Solutions with Virtual Private Networks.DumpsArena.300-730.2021-07-15.5e.98q.vcex
Size 9.74 Mb
Posted July 15, 2021
Downloads 2
Download Implementing Secure Solutions with Virtual Private Networks.DumpsArena.300-730.2021-07-15.5e.98q.vcex

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Purchase

Coupon: MASTEREXAM
With discount: 20%



 
 



Demo Questions

Question 1

Drag and drop the correct commands from the night onto the blanks within the code on the left to implement a design that allow for dynamic spoke-to-spoke communication. Not all comments are used. 

Correct Answer: Exam simulator is required

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/xe-16/sec-conn-dmvpn-xe-16-book/sec-conn-dmvpn-summ-maps.html




Question 2

A second set of traffic selectors is negotiated between two peers using IKEv2. Which IKEv2 packet will contain details of the exchange? 
 

  • A: IKEv2 IKE_SA_INIT
  • B: IKEv2 INFORMATIONAL
  • C: IKEv2 CREATE_CHILD_SA
  • D: IKEv2 IKE_AUTH

Correct Answer: B




Question 3


     

Refer to the exhibit. The DMVPN tunnel is dropping randomly and no tunnel protection is configured. Which spoke configuration mitigates tunnel drops? 

     
     

  • A: Option A
  • B: Option B
  • C: Option C
  • D: Option D  

Correct Answer: D




Question 4

On a FlexVPN hub-and-spoke topology where spoke-to-spoke tunnels are not allowed, which command is needed for the hub to be able to terminate FlexVPN tunnels?

  • A: interface virtual-access
  • B: ip nhrp redirect
  • C: interface tunnel
  • D: interface virtual-template

Correct Answer: D




Question 5

Which statement about GETVPN is true?

  • A: The configuration that defines which traffic to encrypt originates from the key server.
  • B: TEK rekeys can be load-balanced between two key servers operating in COOP.
  • C: The pseudotime that is used for replay checking is synchronized via NTP.
  • D: Group members must acknowledge all KEK and TEK rekeys, regardless of configuration.

Correct Answer: A




Question 6


     

Refer to the exhibit. Which two tunnel types produce the show crypto ipsec sa output seen in the exhibit? (Choose two.)

  • A: crypto map
  • B: DMVPN
  • C: GRE
  • D: FlexVPN
  • E: VTI

Correct Answer: BE




Question 7

Which two changes must be made in order to migrate from DMVPN Phase 2 to Phase 3 when EIGRP is configured? (Choose two.)

  • A: Add NHRP shortcuts on the hub.
  • B: Add NHRP redirects on the spoke.
  • C: Disable EIGRP next-hop-self on the hub.
  • D: Enable EIGRP next-hop-self on the hub.
  • E: Add NHRP redirects on the hub.

Correct Answer: CE




Question 8

     

Refer to the exhibit. A customer cannot establish an IKEv2 site-to-site VPN tunnel between two Cisco ASA devices. 
Based on the syslog message, which action brings up the VPN tunnel?

  • A: Reduce the maximum SA limit on the local Cisco ASA.
  • B: Increase the maximum in-negotiation SA limit on the local Cisco ASA.
  • C: Remove the maximum SA limit on the remote Cisco ASA.
  • D: Correct the crypto access list on both Cisco ASA devices.

Correct Answer: B




Question 9

Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list? (Choose two.)

  • A: group-alias
  • B: certificate map
  • C: optimal gateway selection
  • D: group-url
  • E: AnyConnect client version 

Correct Answer: BD




Question 10

Which method dynamically installs the network routes for remote tunnel endpoints?

  • A: policy-based routing
  • B: CEF
  • C: reverse route injection 
  • D: route filtering

Correct Answer: C

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnav/configuration/12-4t/sec-vpnavailability-12-4t-book/sec-rev-rte-inject.html










CONNECT US

Facebook

Twitter

PROFEXAM WITH A 20% DISCOUNT

You can buy ProfExam with a 20% discount!



HOW TO OPEN VCEX AND EXAM FILES

Use ProfExam Simulator to open VCEX and EXAM files