Home / Cisco / 300-730

Cisco 300-730 Practice Test - Questions Answers, Page 9

Question list

List of questions

Question 81

(0)

Which VPN technology must be used to ensure that routers are able to dynamically form connections with each other rather than sending traffic through a hub and be able to advertise routes without th

Question 82

(0)

An administrator is setting up AnyConnect for the first time for a few users. Currently, the router does not have access to a RADIUS server. Which AnyConnect protocol must be used to allow users to

Question 83

(0)

Refer to the exhibit. DMVPN spoke-to-spoke traffic works, but it passes through the hub, and never sends direct spoke-tospoke traffic. Based on the tunnel interface configuration shown, what must

Question 84

(0)

Refer to the exhibit. A user is connecting from behind a PC with a private IP Address. Their ISP provider is blocking TCP port 443. Which AnyConnect XML configuration will allow the user to estab

Question 85

(0)

Refer to the exhibit. Which two conclusions should be drawn from the DMVPN phase 2 configuration? (Choose two.)

Question 86

(0)

Refer to the exhibit. The VPN tunnel between the FlexVPN spoke and FlexVPN hub 192.168.0.12 is failing. What should be done to correct this issue?

Question 87

(0)

Refer to the exhibit. An IKEv2 site-to-site tunnel between an ASA and a remote peer is not building successfully. What will fix the problem based on the debug output?

Question 88

(0)

Refer to the exhibit. A network engineer is reconfiguring clientless SSLVPN during a maintenance window, and after testing the new configuration, is unable to establish the connection. What must

Question 89

(0)

What are two purposes of the key server in Cisco IOS GETVPN? (Choose two.)

Question 90

(0)

An engineer notices that while an employee is connected remotely, all traffic is being routed to the corporate network. Which split-tunnel policy allows a remote client to use their local provider f

Question 81

Which VPN technology must be used to ensure that routers are able to dynamically form connections with each other rather than sending traffic through a hub and be able to advertise routes without the use of a dynamic routing protocol?

FlexVPN

DMVPN Phase 3

DMVPN Phase 2

GETVPN

Show Answer Comment (0)

Question 82

An administrator is setting up AnyConnect for the first time for a few users. Currently, the router does not have access to a RADIUS server. Which AnyConnect protocol must be used to allow users to authenticate?

EAP-GTC

EAP-MSCHAPv2

EAP-MD5

EAP-AnyConnect

Show Answer Comment (0)

Question 83

Refer to the exhibit.

DMVPN spoke-to-spoke traffic works, but it passes through the hub, and never sends direct spoke-tospoke traffic. Based on the tunnel interface configuration shown, what must be configured on the hub to solve the issue?

Enable NHRP redirect.

Enable split horizon.

Enable IP redirects.

Enable NHRP shortcut.

Show Answer Comment (0)

Question 84

Refer to the exhibit.

A user is connecting from behind a PC with a private IP Address. Their ISP provider is blocking TCP port 443. Which AnyConnect XML configuration will allow the user to establish a connection with the ASA?

Option A

Option B

Option C

Option D

Show Answer Comment (0)

Question 85

Refer to the exhibit.

Which two conclusions should be drawn from the DMVPN phase 2 configuration? (Choose two.)

Next-hop-self is required.

EIGRP neighbor adjacency will fail.

EIGRP is used as the dynamic routing protocol.

EIGRP route redistribution is not allowed.

Spoke-to-spoke communication is allowed.

Show Answer Comment (0)

Question 86

Refer to the exhibit.

The VPN tunnel between the FlexVPN spoke and FlexVPN hub 192.168.0.12 is failing. What should be done to correct this issue?

Add the address 192.168.0.12 255.255.255.255 command to the keyring configuration.

Add the match fvrf any command to the IKEv2 policy.

Add the aaa authorization group psk list Flex_AAA Flex_Auth command to the IKEv2 profile configuration.

Add the tunnel mode gre ip command to the tunnel configuration.

Show Answer Comment (0)

Question 87

Refer to the exhibit.

An IKEv2 site-to-site tunnel between an ASA and a remote peer is not building successfully. What will fix the problem based on the debug output?

Ensure crypto IPsec policy matches on both VPN devices.

Install the correct certificate to validate the peer.

Correct crypto access list on both VPN devices.

Specify the peer IP address in the tunnel group name.

Show Answer Comment (0)

Suggested answer: C

Explanation:

DMVPN stands for Dynamic Multipoint VPN, which is a technology that allows routers to dynamicallyform VPN tunnels with each other without requiring a pre-configured static crypto map. DMVPN usesMultipoint GRE (mGRE) interfaces and Next Hop Resolution Protocol (NHRP) to establish directconnections between routers. DMVPN has three phases of operation, each with different features andbenefits.DMVPN Phase 1 is the basic configuration, where all spokes are configured with a single mGRE interfacethat points to the hub as the NHRP server. The spokes can only communicate with the hub, not witheach other. All traffic must go through the hub, which creates a bottleneck and increases latency.DMVPN Phase 2 improves on Phase 1 by allowing spoke-to-spoke communication without going throughthe hub. This is achieved by using NHRP to dynamically resolve the IP address of the destination spokeand create a direct GRE tunnel between the spokes. However, this still requires the use of a dynamicrouting protocol to advertise routes between the spokes, which adds overhead and complexity.DMVPN Phase 3 further enhances Phase 2 by enabling spoke-to-spoke communication without requiringa dynamic routing protocol. This is done by using NHRP shortcut switching and NHRP redirect messages.When a spoke wants to send traffic to another spoke, it sends an NHRP resolution request to the hub,which responds with an NHRP redirect message containing the IP address of the destination spoke. The source spoke then creates a direct GRE tunnel with the destination spoke and switches the traffic to thenew tunnel. The hub also sends an NHRP resolution reply to the destination spoke, informing it of thesource spoke's IP address. The destination spoke then creates a direct GRE tunnel with the source spokeand switches the traffic to the new tunnel. This way, the spokes can communicate directly without usinga dynamic routing protocol or going through the hub

Question 88

Refer to the exhibit.

A network engineer is reconfiguring clientless SSLVPN during a maintenance window, and after testing the new configuration, is unable to establish the connection. What must be done to remediate this problem?

Enable client services on the outside interface.

Enable clientless protocol under the group policy.

Enable DTLS under the group policy.

Enable auto sign-on for the user’s IP address.

Show Answer Comment (0)

Question 89

What are two purposes of the key server in Cisco IOS GETVPN? (Choose two.)

to download encryption keys

to maintain encryption policies

to distribute routing information

to encrypt data traffic

to authenticate group members

Show Answer Comment (0)

Question 90

An engineer notices that while an employee is connected remotely, all traffic is being routed to the corporate network. Which split-tunnel policy allows a remote client to use their local provider for Internet access when working from home?

tunnelall

excludeall

tunnelspecified

excludespecified

Show Answer Comment (0)

Total 175 questions