Cisco 300-730 Practice Test - Questions Answers, Page 4
Question list
List of questions
An engineer is troubleshooting a new DMVPN setup on a Cisco IOS router. After the show crypto isakmp sa command is issued, a response is returned of "MM_NO_STATE." Why does this failure occur?
The ISAKMP policy priority values are invalid.
ESP traffic is being dropped.
The Phase 1 policy does not match on both devices.
Tunnel protection is not applied to the DMVPN tunnel.
Refer to the exhibit.
The customer can establish a Cisco AnyConnect connection without using an XML profile. When the host "ikev2" is selected in the AnyConnect drop down, the connection fails. What is the cause of this issue?
The HostName is incorrect.
The IP address is incorrect.
Primary protocol should be SSL.
UserGroup must match connection profile.
Refer to the exhibit.
A site-to-site tunnel between two sites is not coming up. Based on the debugs, what is the cause of this issue?
An authentication failure occurs on the remote peer.
A certificate fragmentation issue occurs between both sides.
UDP 4500 traffic from the peer does not reach the router.
An authentication failure occurs on the router.
Refer to the exhibit.
Based on the debug output, which type of mismatch is preventing the VPN from coming up?
interesting traffic
lifetime
preshared key
PFS
Refer to the exhibit.
The IKEv2 site-to-site VPN tunnel between two routers is down. Based on the debug output, which type of mismatch is the problem?
preshared key
peer identity
transform set
ikev2 proposal
Refer to the exhibit.
Which type of mismatch is causing the problem with the IPsec VPN tunnel?
crypto access list
Phase 1 policy
transform set
preshared key
Refer to the exhibit.
What is a result of this configuration?
Spoke 1 fails the authentication because the authentication methods are incorrect.
Spoke 2 passes the authentication to the hub and successfully proceeds to phase 2.
Spoke 2 fails the authentication because the remote authentication method is incorrect.
Spoke 1 passes the authentication to the hub and successfully proceeds to phase 2.
Refer to the exhibit.
Client 1 cannot communicate with client 2. Both clients are using Cisco AnyConnect and have established a successful SSL VPN connection to the hub AS
Which command on the ASA is missing?
dns-server value 10.1.1.2
same-security-traffic permit intra-interface
same-security-traffic permit inter-interface
dns-server value 10.1.1.3
Refer to the exhibit.
An SSL client is connecting to an ASA headend. The session fails with the message “Connection attempt has timed out. Please verify Internet connectivity.” Based on how the packet is processed, which phase is causing the failure?
phase 9: rpf-check
phase 5: NAT
phase 4: ACCESS-LIST
phase 3: UN-NAT
Which redundancy protocol must be implemented for IPsec stateless failover to work?
SSO
GLBP
HSRP
VRRP
Question