Ask Question
Cisco 300-730 Practice Test - Questions Answers, Page 10
Add to Whishlist
List of questions
Question 91
In order to enable FlexVPN to use a AAA attribute list, which two tasks must be performed? (Choose two.)
Define the RADIUS server.
Verify that clients are using the correct authorization policy.
Define the AAA server.
Assign the list to an authorization policy.
Set the maximum segment size.
Question 92
Which technology and VPN component allows a VPN headend to dynamically learn post NAT IP addresses of remote routers at different sites?
DMVPN with ISAKMP
GETVPN with ISAKMP
DMVPN with NHRP
GETVPN with NHRP
Question 93
An engineer must configure remote desktop connectivity for offsite admins via clientless SSL VPN, configured on a Cisco ASA to Windows Vista workstations. Which two configurations provide the requested access? (Choose two.)
Telnet bookmark via the Telnet plugin
RDP2 bookmark via the RDP2 plugin
VNC bookmark via the VNC plugin
Citrix bookmark via the ICA plugin
SSH bookmark via the SSH plugin
Question 94
A network engineer must design a clientless VPN solution for a company. VPN users must be able to access several internal web servers. When reachability to those web servers was tested, it was found that one website is not being rewritten correctly by the AS
What is a potential solution for this issue while still allowing it to be a clientless VPN setup?
Set up a smart tunnel with the IP address of the web server.
Set up a NAT rule that translates the ASA public address to the web server private address on port 80.
Set up Cisco AnyConnect with a split tunnel that has the IP address of the web server.
Set up a WebACL to permit the IP address of the web server.
Question 95
Which two types of SSO functionality are available on the Cisco ASA without any external SSO servers? (Choose two.)
SAML
NTLM
Kerberos
OAuth 2.0
HTTP Basic
The auto-signon command is a single sign-on method for users of clientless SSL VPN sessions. It passesthe login credentials (username and password) to internal servers for authentication using NTLMauthentication, basic authentication, or both. Multiple auto-signon commands can be entered and areprocessed according to the input order (early commands take precedence) https://www.cisco.com/c/en/us/td/docs/security/asa/asa916/configuration/vpn/asa-916-vpn-config/webvpn-configure-policy-groups.html#ID-2439-00001438
Question 96
Refer to the exhibit.
Which type of VPN implementation is displayed?
IKEv1 cluster
IKEv2 backup gateway
IKEv2 load balancer
IKEv2 reconnect
Question 97
A network engineer is setting up a clientless SSLVPN on a Cisco AS
Remote users must be able to access an internal webserver via the URL example.com. Which two steps accomplish this task? (Choose two.)
Configure a bookmark for the webserver.
Configure routing so that the user's computer can reach the webserver.
Configure a DNS server that can resolve the webserver URL.
Configure a browser plugin on the Cisco ASA.
Configure routing so that the Cisco ASA can reach the webserver.
Question 98
A network engineer has set up a FlexVPN server to terminate multiple FlexVPN clients. The VPN tunnels are established without issue. However, when a Change of Authorization is issued by the RADIUS server, the FlexVPN server does not update the authorization of connected FlexVPN clients.
Which action resolves this issue?
Add the aaa server radius dynamic-author command on the FlexVPN clients.
Fix the RADIUS key mismatch between the RADIUS server and FlexVPN server.
Add the aaa server radius dynamic-author command on the FlexVPN server.
Fix the RADIUS key mismatch between the RADIUS server and FlexVPN clients.
Question 99
A company needs to ensure only corporate issued laptops and devices are allowed to connect with the Cisco AnyConnect client. The solution should be applicable to multiple operating systems, including Windows, MacOS, and Linux, and should allow for remote remediation if a corporate issued device is stolen. Which solution should be used to accomplish these goals?
Use a DAP registry check on the system to determine the relationship with the corporate domain.
Use a DAP file check on the system to determine the relationship with the corporate domain.
Install and authenticate user certificates on the corporate devices.
Install and authenticate machine certificates on the corporate devices
https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/asdm78/vpn/asdm-78-vpn-config/vpnasdm-dap.html#ID-2184-00000017
Question 100
When a FlexVPN is configured, which two components must be configured for IKEv2? (Choose two.)
method
profile
proposal
preference
persistence
Related questions
Export
If you didn't receive an email within 5 minutes, you should submit a support request to [email protected].
|
BASIC - 1 Month
$
3
Full latest questions
No CAPTCHA
New Updates
Export to VPLUS
Export to PDF - All questions
Team support
|
PLUS - 2 Months
$
15
Full latest questions
No CAPTCHA
New Updates
Export to VPLUS
Export to PDF - All questions
Team support
|
PRO - 6 Months
$
40
Full latest questions
No CAPTCHA
New Updates
Export to VPLUS
Export to PDF - All questions
Team support
|
Full latest questions
No CAPTCHA
New Updates
Export to VPLUS
Export to PDF - All questions
Team support
Full latest questions
No CAPTCHA
New Updates
Export to VPLUS
Export to PDF - All questions
Team support
Full latest questions
No CAPTCHA
New Updates
Export to VPLUS
Export to PDF - All questions
Team support
Selling illegal goods, money scams etc.
Serious attack on a group.
Harassing an individual (including doxing)
Threatening or glorifying violence or serious harm, including self-harm
Nudity/Sexual content
Sexually explicit or suggestive imagery or writing involving minors
Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans
Reusing content without attribution (link and blockquotes)
Not in English or has very bad formatting, grammar, and spelling
Author's credential is offensive, spam, or impersonation
Ex. Illegal content, incomplete question...
Question