Ask Question
Cisco 300-730 Practice Test - Questions Answers, Page 9
Add to Whishlist
List of questions
Question 81
Which VPN technology must be used to ensure that routers are able to dynamically form connections with each other rather than sending traffic through a hub and be able to advertise routes without the use of a dynamic routing protocol?
FlexVPN
DMVPN Phase 3
DMVPN Phase 2
GETVPN
DMVPN stands for Dynamic Multipoint VPN, which is a technology that allows routers to dynamicallyform VPN tunnels with each other without requiring a pre-configured static crypto map. DMVPN usesMultipoint GRE (mGRE) interfaces and Next Hop Resolution Protocol (NHRP) to establish directconnections between routers. DMVPN has three phases of operation, each with different features andbenefits.DMVPN Phase 1 is the basic configuration, where all spokes are configured with a single mGRE interfacethat points to the hub as the NHRP server. The spokes can only communicate with the hub, not witheach other. All traffic must go through the hub, which creates a bottleneck and increases latency.DMVPN Phase 2 improves on Phase 1 by allowing spoke-to-spoke communication without going throughthe hub. This is achieved by using NHRP to dynamically resolve the IP address of the destination spokeand create a direct GRE tunnel between the spokes. However, this still requires the use of a dynamicrouting protocol to advertise routes between the spokes, which adds overhead and complexity.DMVPN Phase 3 further enhances Phase 2 by enabling spoke-to-spoke communication without requiringa dynamic routing protocol. This is done by using NHRP shortcut switching and NHRP redirect messages.When a spoke wants to send traffic to another spoke, it sends an NHRP resolution request to the hub,which responds with an NHRP redirect message containing the IP address of the destination spoke. The
Question 82
An administrator is setting up AnyConnect for the first time for a few users. Currently, the router does not have access to a RADIUS server. Which AnyConnect protocol must be used to allow users to authenticate?
EAP-GTC
EAP-MSCHAPv2
EAP-MD5
EAP-AnyConnect
Question 83
Refer to the exhibit.
DMVPN spoke-to-spoke traffic works, but it passes through the hub, and never sends direct spoke-tospoke traffic. Based on the tunnel interface configuration shown, what must be configured on the hub to solve the issue?
Enable NHRP redirect.
Enable split horizon.
Enable IP redirects.
Enable NHRP shortcut.
Question 84
Refer to the exhibit.
A user is connecting from behind a PC with a private IP Address. Their ISP provider is blocking TCP port 443. Which AnyConnect XML configuration will allow the user to establish a connection with the ASA?
Option A
Option B
Option C
Option D
Question 85
Refer to the exhibit.
Which two conclusions should be drawn from the DMVPN phase 2 configuration? (Choose two.)
Next-hop-self is required.
EIGRP neighbor adjacency will fail.
EIGRP is used as the dynamic routing protocol.
EIGRP route redistribution is not allowed.
Spoke-to-spoke communication is allowed.
Question 86
Refer to the exhibit.
The VPN tunnel between the FlexVPN spoke and FlexVPN hub 192.168.0.12 is failing. What should be done to correct this issue?
Add the address 192.168.0.12 255.255.255.255 command to the keyring configuration.
Add the match fvrf any command to the IKEv2 policy.
Add the aaa authorization group psk list Flex_AAA Flex_Auth command to the IKEv2 profile configuration.
Add the tunnel mode gre ip command to the tunnel configuration.
Question 87
Refer to the exhibit.
An IKEv2 site-to-site tunnel between an ASA and a remote peer is not building successfully. What will fix the problem based on the debug output?
Ensure crypto IPsec policy matches on both VPN devices.
Install the correct certificate to validate the peer.
Correct crypto access list on both VPN devices.
Specify the peer IP address in the tunnel group name.
DMVPN stands for Dynamic Multipoint VPN, which is a technology that allows routers to dynamicallyform VPN tunnels with each other without requiring a pre-configured static crypto map. DMVPN usesMultipoint GRE (mGRE) interfaces and Next Hop Resolution Protocol (NHRP) to establish directconnections between routers. DMVPN has three phases of operation, each with different features andbenefits.DMVPN Phase 1 is the basic configuration, where all spokes are configured with a single mGRE interfacethat points to the hub as the NHRP server. The spokes can only communicate with the hub, not witheach other. All traffic must go through the hub, which creates a bottleneck and increases latency.DMVPN Phase 2 improves on Phase 1 by allowing spoke-to-spoke communication without going throughthe hub. This is achieved by using NHRP to dynamically resolve the IP address of the destination spokeand create a direct GRE tunnel between the spokes. However, this still requires the use of a dynamicrouting protocol to advertise routes between the spokes, which adds overhead and complexity.DMVPN Phase 3 further enhances Phase 2 by enabling spoke-to-spoke communication without requiringa dynamic routing protocol. This is done by using NHRP shortcut switching and NHRP redirect messages.When a spoke wants to send traffic to another spoke, it sends an NHRP resolution request to the hub,which responds with an NHRP redirect message containing the IP address of the destination spoke. The source spoke then creates a direct GRE tunnel with the destination spoke and switches the traffic to thenew tunnel. The hub also sends an NHRP resolution reply to the destination spoke, informing it of thesource spoke's IP address. The destination spoke then creates a direct GRE tunnel with the source spokeand switches the traffic to the new tunnel. This way, the spokes can communicate directly without usinga dynamic routing protocol or going through the hub
Question 88
Refer to the exhibit.
A network engineer is reconfiguring clientless SSLVPN during a maintenance window, and after testing the new configuration, is unable to establish the connection. What must be done to remediate this problem?
Enable client services on the outside interface.
Enable clientless protocol under the group policy.
Enable DTLS under the group policy.
Enable auto sign-on for the user’s IP address.
Question 89
What are two purposes of the key server in Cisco IOS GETVPN? (Choose two.)
to download encryption keys
to maintain encryption policies
to distribute routing information
to encrypt data traffic
to authenticate group members
Question 90
An engineer notices that while an employee is connected remotely, all traffic is being routed to the corporate network. Which split-tunnel policy allows a remote client to use their local provider for Internet access when working from home?
tunnelall
excludeall
tunnelspecified
excludespecified
Related questions
Export
If you didn't receive an email within 5 minutes, you should submit a support request to [email protected].
|
BASIC - 1 Month
$
3
Full latest questions
No CAPTCHA
New Updates
Export to VPLUS
Export to PDF - All questions
Team support
|
PLUS - 2 Months
$
15
Full latest questions
No CAPTCHA
New Updates
Export to VPLUS
Export to PDF - All questions
Team support
|
PRO - 6 Months
$
40
Full latest questions
No CAPTCHA
New Updates
Export to VPLUS
Export to PDF - All questions
Team support
|
Full latest questions
No CAPTCHA
New Updates
Export to VPLUS
Export to PDF - All questions
Team support
Full latest questions
No CAPTCHA
New Updates
Export to VPLUS
Export to PDF - All questions
Team support
Full latest questions
No CAPTCHA
New Updates
Export to VPLUS
Export to PDF - All questions
Team support
Selling illegal goods, money scams etc.
Serious attack on a group.
Harassing an individual (including doxing)
Threatening or glorifying violence or serious harm, including self-harm
Nudity/Sexual content
Sexually explicit or suggestive imagery or writing involving minors
Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans
Reusing content without attribution (link and blockquotes)
Not in English or has very bad formatting, grammar, and spelling
Author's credential is offensive, spam, or impersonation
Ex. Illegal content, incomplete question...
Question