Refer to the exhibit. All internal clients behind the ASA are port address translated to the public outside interface that has an IP address of 3.3.3.3. Client 1 and client 2 have established successful SSL VPN connections to the ASA. What must be implemented so that "3.3.3.3" is returned from a browser search on the IP address?

Tunnel All Networks under Group Policy

Same-security-traffic permit inter-interface under Group Policy

Exclude Network List Below under Group Policy

Tunnel All Networks under Group Policy

Tunnel Network List Below under Group Policy

A Cisco ASA is configured in active/standby mode. What is needed to ensure that Cisco AnyConnect users can connect after a failover event?

AnyConnect images must be uploaded to both failover ASA devices.

The vpnsession-db must be cleared manually.

Configure a backup server in the XML profile.

AnyConnect client must point to the standby IP address.

Which benefit of FlexVPN is a limitation of DMVPN using IKEv1?

IKE implementation can install routes in routing table.

GRE encapsulation allows for forwarding of non-IP traffic.

IKE implementation can install routes in routing table.

NHRP authentication provides enhanced security.

Dynamic routing protocols can be configured.

What is a requirement for smart tunnels to function properly?

Java or ActiveX must be enabled on the client machine.

Stateful failover must not be configured.

The user on the client machine must have admin access.

Which feature of GETVPN is a limitation of DMVPN and FlexVPN?

no requirement for an overlay routing protocol

sequence numbers that enable scalable replay checking

design for use over public or private WAN

no requirement for an overlay routing protocol

Refer to the exhibit. Cisco AnyConnect must be set up on a router to allow users to access internal servers 192.168.0.10 and 192.168.0.11. All other traffic should go out of the client's local NIC. Which command accomplishes this configuration?

svc split include 192.168.0.0 255.255.255.0

svc split exclude 192.168.0.0 255.255.255.0

An engineer has integrated a new DMVPN to link remote offices across the internet using Cisco IOS routers. When connecting to remote sites, pings and voice data appear to flow properly, and all tunnel stats show that they are up.However, when trying to connect to a remote server using RDP, the connection fails. Which action resolves this issue?

Adjust the MTU size within the routers.

Add RDP port to the extended ACL.

Replace certificate on the RDP server.

Which command shows the smart default configuration for an IPsec profile?

show crypto ipsec profile default

show run all crypto ipsec profile

ipsec profile does not have any smart default configuration

show smart-defaults ipsec profile

show crypto ipsec profile default

Refer to the exhibit. The DMVPN spoke is not establishing a session with the hub. Which two actions resolve this issue?(Choose two.)

Change the ISAKMP policy authentication on the spoke to pre-shared.

Change the nhrp authentication key on the spoke to cisco123.

Change the spoke nhs to 172.16.18.1 and the nbma to 10.0.0.1.

Change the transform set to mode tunnel.

Change the ISAKMP policy authentication on the spoke to pre-shared.

Change the ISAKMP key address on the spoke to 0.0.0.0.

Change the nhrp authentication key on the spoke to cisco123.

Refer to the exhibit. A network engineer is configuring a remote access SSLVPN and is unable to complete the connection using local credentials. What must be done to remediate this problem?

Enable the client protocol in the Cisco AnyConnect profile.

Configure a AAA server group to authenticate the client.

Change the authentication method to local.

Configure the group policy to force local authentication.

Refer to the exhibit. Upon setting up a tunnel between two sites, users are complaining that connections to applications over the VPN are not working consistently. The output of show crypto ipsec sa was collected on one of the VPN devices. Based on this output, what should be done to fix this issue?

Make an adjustment to IPSec replay window.

Enable perfect forward secrecy.

Specify the application networks in the remote identity.

Make an adjustment to IPSec replay window.

After a user configures a connection profile with a bookmark list and tests the clientless SSLVPN connection, all of the bookmarks are grayed out. What must be done to correct this behavior?

Configure a DNS server on the Cisco ASA and verify it has a record for the web server.

Apply the bookmark to the correct group policy.

Specify the correct port for the web server under the bookmark.

Configure a DNS server on the Cisco ASA and verify it has a record for the web server.

Verify HTTP/HTTPS connectivity between the Cisco ASA and the web server.

While troubleshooting, an engineer finds that the show crypto isakmp sa command indicates that the last state of the tunnel is MM_KEY_EXCH. What is the next step that should be taken to resolve this issue?

Confirm that the pre-shared keys match on both devices.

Verify that the ISAKMP proposals match.

Ensure that UDP 500 is not being blocked between the devices.

Correct the peer's IP address on the crypto map.

Confirm that the pre-shared keys match on both devices.

Cisco 300-730 Practice Test 2 - Free Online Exam Prep & Questions

Question 1 / 40

Which technology works with IPsec stateful failover?

GLBR

HSRP

GRE

VRRP

Comment (0)

Cisco 300-730 Practice Test 2

Question

Cisco 300-730 Practice Tests

Practice Tests