Latest 300-730 Actual Free Exam Updated 100 Questions
Online Questions - Valid Practice 300-730 Exam Dumps Test Questions
NEW QUESTION 22
Refer to the exhibit.
Which two commands under the tunnel-group webvpn-attributes result in a Cisco AnyConnect user receiving the AnyConnect prompt in the exhibit? (Choose two.)
- A. group-policy General internal
- B. group-url https://172.16.31.10/General enable
- C. authentication aaa
- D. authentication certificate
- E. group-alias General enable
Answer: A,E
NEW QUESTION 23
What uses an Elliptic Curve key exchange algorithm?
- A. ECDSA
- B. AES-GCM
- C. SHA
- D. ECDHE
Answer: D
Explanation:
Section: Secure Communications Architectures
Explanation
Explanation/Reference: https://blog.cloudflare.com/a-relatively-easy-to-understand-primer-on-elliptic-curve-cryptography/
NEW QUESTION 24
Refer to the exhibit.
Which type of VPN implementation is displayed?
- A. IKEv1 cluster
- B. IKEv2 reconnect
- C. IKEv2 backup gateway
- D. IKEv2 load balancer
Answer: D
NEW QUESTION 25
Refer to the exhibit.
Which value must be configured in the User Group field when the Cisco AnyConnect Profile is created to connect to an ASA headend with IPsec as the primary protocol?
- A. tunnel-group
- B. group-policy
- C. group-alias
- D. address-pool
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect41/ administration/guide/b_AnyConnect_Administrator_Guide_4-1/configure-vpn.html
NEW QUESTION 26
Which two parameters help to map a VPN session to a tunnel group without using the tunnel-group list? (Choose two.)
- A. group-alias
- B. AnyConnect client version
- C. optimal gateway selection
- D. certificate map
- E. group-url
Answer: D,E
NEW QUESTION 27
What are two functions of ECDH and ECDSA? (Choose two.)
- A. encryption
- B. revocation
- C. nonrepudiation
- D. key exchange
- E. digital signature
Answer: D,E
NEW QUESTION 28
Which technology works with IPsec stateful failover?
- A. GRE
- B. VRRP
- C. GLBR
- D. HSRP
Answer: D
Explanation:
Section: Secure Communications Architectures
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/ios/12_2/12_2y/12_2yx11/feature/guide/ ft_vpnha.html#wp1122512
NEW QUESTION 29
Refer to the exhibit.
What is a result of this configuration?
- A. Spoke 1 passes the authentication to the hub and successfully proceeds to phase 2.
- B. Spoke 2 fails the authentication because the remote authentication method is incorrect.
- C. Spoke 2 passes the authentication to the hub and successfully proceeds to phase 2.
- D. Spoke 1 fails the authentication because the authentication methods are incorrect.
Answer: D
NEW QUESTION 30
Refer to the exhibit.
An SSL client is connecting to an ASA headend. The session fails with the message "Connection attempt has timed out. Please verify Internet connectivity." Based on how the packet is processed, which phase is causing the failure?
- A. phase 5: NAT
- B. phase 9: rpf-check
- C. phase 4: ACCESS-LIST
- D. phase 3: UN-NAT
Answer: D
NEW QUESTION 31
Which benefit of FlexVPN is a limitation of DMVPN using IKEv1?
- A. Dynamic routing protocols can be configured.
- B. IKE implementation can install routes in routing table.
- C. NHRP authentication provides enhanced security.
- D. GRE encapsulation allows for forwarding of non-IP traffic.
Answer: B
NEW QUESTION 32
Refer to the exhibit.
The customer can establish a Cisco AnyConnect connection without using an XML profile. When the host "ikev2" is selected in the AnyConnect drop down, the connection fails. What is the cause of this issue?
- A. Primary protocol should be SSL.
- B. The HostName is incorrect.
- C. The IP address is incorrect.
- D. UserGroup must match connection profile.
Answer: D
Explanation:
Reference:
https://community.cisco.com/t5/security-documents/anyconnect-xml-settings/ta-p/3157891
NEW QUESTION 33
Refer to the exhibit.
An engineer is troubleshooting a new GRE over IPsec tunnel. The tunnel is established but the engineer cannot ping from spoke 1 to spoke 2. Which type of traffic is being blocked?
- A. ESP packets from spoke2 to spoke1
- B. ESP packets from spoke1 to spoke2
- C. ISAKMP packets from spoke2 to spoke1
- D. ISAKMP packets from spoke1 to spoke2
Answer: A
NEW QUESTION 34
Which feature allows the ASA to handle nonstandard applications and web resources so that they display correctly over a clientless SSL VPN connection?
- A. WebType ACL
- B. single sign-on
- C. plug-ins
- D. Smart Tunnel
Answer: D
Explanation:
Section: Remote access VPNs
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/ asa_90_cli_config/vpn_clientless_ssl.html#29951
NEW QUESTION 35
Which IKE identity does an IOS/IOS-XE headend expect to receive if an IPsec Cisco AnyConnect client uses default settings?
- A. *$RemoteAccessVpnClient$*
- B. *$DfltlkeldentityS*
- C. *$SecureMobilityClient$*
- D. *$AnyConnectClient$*
Answer: D
Explanation:
Section: Remote access VPNs
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect- IKEv2-Remote-Access.html
NEW QUESTION 36
A network engineer must implement an SSLVPN Cisco AnyConnect solution that supports 500 concurrent users, ensures all traffic from the client passes through the ASA, and allows users to access all devices on the inside interface subnet (192.168.0.0/24). Assuming all other configuration is set up appropriately, which configuration implements this solution?
- A. Option B
- B. Option C
- C. Option D
- D. Option A
Answer: D
NEW QUESTION 37
Refer to the exhibit.
A customer cannot establish an IKEv2 site-to-site VPN tunnel between two Cisco ASA devices. Based on the syslog message, which action brings up the VPN tunnel?
- A. Increase the maximum in-negotiation SA limit on the local Cisco ASA.
- B. Reduce the maximum SA limit on the local Cisco ASA.
- C. Remove the maximum SA limit on the remote Cisco ASA.
- D. Correct the crypto access list on both Cisco ASA devices.
Answer: A
NEW QUESTION 38
......
300-730 Exam PDF [2023] Tests Free Updated Today with Correct 100 Questions: https://itcertspass.prepawayexam.com/Cisco/braindumps.300-730.ete.file.html